HP VPN Firewall Appliances High Availability Configuration Guide
73
Configuration procedure
You can associate a nonexistent track entry with PBR. The association takes effect only after you use the
track command to create the track entry. For more information about PBR, see Network Management
Configuration Guide.
To associate Track with PBR:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Create a policy or policy
node and enter PBR policy
node view.
policy-based-route policy-name [ deny |
permit ] node node-number
N/A
3. Define a match criterion.
• Define a packet length match criterion:
if-match packet-length min-len max-len
• Define an ACL match criterion:
if-match acl acl-number
Optional.
By default, no packets are
filtered.
4. Associate Track with PBR.
• Set the outgoing interface, and
associate it with a track entry:
apply output-interface interface-type
interface-number [ track
track-entry-number ] [ interface-type
interface-number [ track
track-entry-number ] ]
• Set the next hop, and associate it with a
track entry:
apply ip-address next-hop ip-address
[ track track-entry-number ] [ ip-address
[ track track-entry-number ] ]
• Set the default outgoing interface, and
associate it with a track entry:
apply default output-interface
interface-type interface-number [ track
track-entry-number ] [ interface-type
interface-number [ track
track-entry-number ] ]
• Set the default next hop, and associate
it with a track entry:
apply ip-address default next-hop
ip-address [ track track-entry-number]
[ ip-address [ track track-entry-number] ]
Use at least one of the
commands.
Associating Track with interface backup
Interface backup allows interfaces on a device to back up each other, with the active interface
transmitting data and the standby interfaces staying in backup state. When the active interface or the link
where the active interface resides fails, and data cannot be transmitted, a standby interface is brought
up to transmit data, enhancing the reliability of the network.
Associate a standby interface with a track entry so that the standby interface can detect the status of the
active interface by checking the status of the track entry, and change its status.