No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI Firewall Comprehensive Configuration Examples

This document describes the application scenarios and configuration methods in typical projects of the firewall.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Hot Standby

Configuring Hot Standby

Context

Configure hot standby according to the figure below.

Figure 2-5  Hot standby

Procedure

  1. Configure a VRRP group on the upstream interface of FW_A, and set the VRRP group to an active state.

    <FW_A> system-view
    [FW_A] interface Eth-Trunk 1.1
    [FW_A-Eth-Trunk1.1] vrrp vrid 1 virtual-ip 1.1.1.1 29 active
    [FW_A-Eth-Trunk1.1] quit
    [FW_A] interface Eth-Trunk 2.1
    [FW_A-Eth-Trunk2.1] vrrp vrid 2 virtual-ip 2.2.2.1 29 active
    [FW_A-Eth-Trunk2.1] quit
    [FW_A] interface Eth-Trunk 1.2
    [FW_A-Eth-Trunk1.2] vrrp vrid 3 virtual-ip 1.1.2.1 29 active
    [FW_A-Eth-Trunk1.2] quit
    [FW_A] interface Eth-Trunk 2.2
    [FW_A-Eth-Trunk2.2] vrrp vrid 4 virtual-ip 2.2.3.1 29 active
    [FW_A-Eth-Trunk2.2] quit

  2. Configure a VGMP group on FW_A to monitor downstream interfaces.

    [FW_A] hrp track interface GigabitEthernet 1/0/3
    [FW_A] hrp track interface GigabitEthernet 1/0/4

  3. Enable on FW_A the function of adjusting OSPF costs according to the VGMP status.

    [FW_A] hrp adjust ospf-cost enable

  4. Specify the heartbeat interface and enable hot standby on FW_A.

    [FW_A] hrp interface Eth-Trunk0 remote 10.0.7.2
    [FW_A] hrp enable

  5. Configure hot standby on FW_B with reference to the above procedure. The difference is that the state of the VRRP group is set to standby and that the remote address of hrp interface is set to 10.0.7.1.
  6. Configure routers and switches.
    1. Configure OSPF and advertise the neighboring network segments on the routers. For the specific configuration command, see the related router documentation.
    2. Add three interfaces to one VLAN on the switches. For the specific configuration command, see the related router documentation.

Result

A hot-standby relationship has been established to back up most subsequent configurations. Therefore, in the subsequent steps, you only need to make configurations on the active FW_A (unless otherwise stated).

Translation
Download
Updated: 2019-01-26

Document ID: EDOC1100062972

Views: 16229

Downloads: 706

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next