Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Huawei USG Firewall backup-hrp and ip-link Linkage

2025-01-17 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Fw1:

InterfaceGigabitEthernet0/0/0

Ip address 192.168.1.2 255.255.255.0

Hrp track master

InterfaceGigabitEthernet0/0/1

Ip address 202.100.1.1 255.255.255.0

Hrp track master

Hrp mirror sessionenable

Hrp enable

Hrp ospf-costadjust-enable

Hrp interfaceGigabitEthernet0/0/2

Ip-link check enable

Ip-link 1destination 100.100.100.100 interface g0/0/1 mode icmp

Hrp track ip-link 1master

Fw2:

InterfaceGigabitEthernet0/0/0

Ip address 192.168.2.2 255.255.255.0

Hrp track slave

InterfaceGigabitEthernet0/0/1

Ip address 202.100.2.1 255.255.255.0

Hrp track slave

Hrp mirror sessionenable

Hrp enable

Hrp ospf-costadjust-enable

Hrp interfaceGigabitEthernet0/0/2

Ip-link check enable

Ip-link 1destination 100.100.100.100 interface g0/0/1 mode icmp

Hrp track ip-link 1salve

-

View HRP status:

HRP_ M[FW1] dis hrpstate

09:49:06 2014-07-24

The firewall's config state is: MASTER

Current state of interfaces tracked by master:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: up

HRP_ S[FW2] dis hrpstate

09:49:27 2014-07-24

The firewall's config state is: SLAVE

Current state of interfaces tracked by slave:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: up

-

View ip-link status:

HRP_ M[FW1] disip-link

09:38:14 2014-07-24

Num state timer***-instance ip-address interface-name mode vgmp next-hop

1 up 3 100.100.100.100GE0/0/1 icmp master

HRP_ S[FW2] disip-link

09:38:21 2014-07-24

Num state timer***-instance ip-address interface-name mode vgmp next-hop

1 up 3 100.100.100.100 GE0/0/1 icmp slave

-

When the G0Accord 1 of fw1 or G0UniUniG0 of hrp fails, hrp will switch between the main and the standby.

HRP_ M[FW1] intg0/0/1

HRP_ M [FW1-GigabitEthernet0/0/1] shutdown

HRP_ S [FW1-GigabitEthernet0/0/1] dis hrp state

10:30:25 2014-07-24

The firewall's config state is: SLAVE

Current state of interfaces tracked by master:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: down

HRP_ M[FW2] display hrp state

10:30:56 2014-07-24

The firewall's config state is: MASTER

Current state of interfaces tracked by slave:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: up

When the 100.100.100.100 address of the outside router fails, the ip-link check fails and the hrp master / standby switches.

[Outside-LoopBack0] intg0/0/0

[Outside-GigabitEthernet0/0/0] shutdown (failed to reach 100.100.100.100, ip-link check failed)

HRP_ S[FW1] display hrp state

10:34:28 2014-07-24

The firewall's config state is: SLAVE

Current state of interfaces tracked by master:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: up

HRP_ M[FW2] display hrp state

10:34:46 2014-07-24

The firewall's config state is: MASTER

Current state of interfaces tracked by slave:

GigabitEthernet0/0/0: up

GigabitEthernet0/0/1: up

HRP_ S[FW1] dis ip-link

11:06:44 2014-07-24

Num state timer***-instance ip-address interface-name mode vgmp next-hop

1 down 3 100.100.100.100 GE0/0/1 icmp master

HRP_ M[FW2] dis ip-link

11:07:03 2014-07-24

Num state timer***-instance ip-address interface-name mode vgmp next-hop

1 up 3 100.100.100.100 GE0/0/1 icmp slave

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report