HP VPN Firewall Appliances High Availability Configuration Guide

60
Displaying and maintaining stateful failover
Task Command Remarks
Display the running status and
related information of stateful
failover.
display dhbk status [ | { begin |
exclude | include }
regular-expression ]
Available in any view.
Stateful failover configuration example
Network requirements
In Figure 34, Device A and Device B serve as the internal gateways of an enterprise network. Firewall A
and Firewall B, respectively attached to Device A and Device B, provide portal access authentication for
internal users. Configure stateful failover between Firewall A and Firewall B. When one device fails, the
other device takes over the services to ensure service continuity.
Figure 34 Network diagram
Configuration procedure
1. Configure Firewall A:
# Create VLAN 100.
<FirewallA> system-view
[FirewallA] vlan 100
# Assign GigabitEthernet 1/1 to VLAN 100.
[FirewallA -vlan100] port gigabitethernet 1/1
[FirewallA -vlan100] quit
# Specify VLAN 100 as a backup VLAN.
[FirewallA] dhbk interface gigabitethernet 1/1 vlan 100
# Enable symmetric-path mode stateful failover.
[FirewallA] dhbk enable backup-type symmetric-path
2. Configure Device A: