FAQ: two (active or standby) FW configured as VRRP, how to on-line modify the slave configuration?
A: can according to the following steps to realize on-line modify slave configuration.
1、 observe two FW active or standby state
In front of the firewall with "HRP_M" means the active state, such as HRP_M; "HRP_S" is the standby state. Presume the initial value, A is in the active state, B is in standby state.
2、Execute<USG5300>undo hrp auto-sync config command in global view to forbid automatic backup of configuration command.
• the equipment support the command only working in routing mode or hybrid mode.
• Only started the VRRP function, namely after configure hrp enable, can execute this command.
• If use the active/standby mode, only device as VRRP management group principal can startup configuration command and automatic backup of connection state.
• If using the load sharing way, only configure master can startup configuration command automatic backup, all devices as VRRP management group principal can startup connection state automatic backup.
3、after execute step 2 command, then can configure in the slave, after configure execute <USG5300> hrp auto-sync config again in global view.
Two FW in VRRP state, usually master will automatic configure to the slave. So slave configuration can not be modified on-line in normal situation.