How do I configure IP-link on a USG?
IP-link automatically checks the status of service links. It can detect the status of the links indirectly connected to a firewall for service continuity.
When multiple IP-links are configured on a firewall, the IP-links send link detection packets concurrently. As a result, the CPU usage increases dramatically. To resolve this problem, enable the IP-link group function to bundle IP-links into an IP-link group. The IP-links in the IP-link group send link detection packets in batches to reduce the CPU usage increase.
The following is an IP-link configuration example on a USG:
1. The USG functions as a DHCP client to send ICMP packets to the destination address 188.8.131.52 of the DHCP server for link detection.
<USG > system-view
[USG] ip-link 1 destination 184.108.40.206 interface GigabitEthernet 0/0/2 mode icmp next-hop dhcp
2. Configure IP-link 1 to send ICMP packets to 220.127.116.11 for link detection.
[USG] ip-link 1 destination 18.104.22.168 timer 5
1. If more than 32 IP-links are configured on the device, run the ip-link group enable command to enable the IP-link group function and perform the following configurations:
a. Run the ip-link group add linkid beginlinkID [to endlinkID] command to add multiple IP-links to an IP-link group.
b. Run the ip-link group interval interval command to set an interval at which the IP-link group sends detection packets.
A larger interval reduces the CPU load but degrades link detection sensitivity.
2. If less than 32 IP-links are configured on the device, you are advised to run the ip-link check enable command to enable IP-link detection. Alternatively, you can enable the IP-link group function.Generally, IP-links can associate with other functions based on networking. For details about the association configuration, see the product documentation.