Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring HSB on Firewalls
Context
In this document, VRRP hot standby (HSB) is used to deploy firewalls, improving the device-level reliability.
Data Plan
Table 4-18 Data plan for HSB of firewalls (1)
Device |
Working Mode |
Role |
Heartbeat Interface |
IP Address |
Remote Interface IP |
Automatic Static Route Backup |
Other Parameters |
|---|---|---|---|---|---|---|---|
FW-a |
Master/Backup mode |
Master |
XGE0/0/3 |
192.168.9.1 |
192.168.9.2 |
Enabled |
Default |
FW-b |
Master/Backup mode |
Backup |
XGE0/0/3 |
192.168.9.2 |
192.168.9.1 |
Enabled |
Default |
Table 4-19 Data plan for HSB of firewalls (2) (parameters for each VRRP group)
Device |
VRID |
Interface |
Virtual Interface IP/Mask |
|---|---|---|---|
FW-a |
1 |
XGE/0/0/1 |
192.0.2.254/24 |
2 |
XGE/0/0/2 |
198.51.100.254/24 |
|
3 |
Eth-Trunk1.1 |
192.168.5.254/24 |
|
4 |
Eth-Trunk1.2 |
192.168.6.254/24 |
|
5 |
Eth-Trunk1.3 |
192.168.7.254/24 |
|
FW-b |
1 |
XGE/0/0/1 |
192.0.2.254/24 |
2 |
XGE/0/0/2 |
198.51.100.254/24 |
|
3 |
Eth-Trunk1.1 |
192.168.5.254/24 |
|
4 |
Eth-Trunk1.2 |
192.168.6.254/24 |
|
5 |
Eth-Trunk1.3 |
192.168.7.254/24 |
Procedure
- Choose System > High Availability > Dual-System Hot Standby. Click Edit and configure the HSB function of the firewalls based on the data plan. The following example configures VRRP VRID 1 on FW-a.
