华为防火墙二层透明模式下双机热备负载分担配置(两端为路由器)

华为防火墙二层透明模式下双机热备负载分担配置(两端为路由器)_第1张图片

这种模式只做负载分担,不能是主备备份,因为主备备份模式下,备设备会把vlan down掉,如果是主备备份模式,那在主挂后,备的状态在切换过程中先起vlan,再建立ospf邻接,那业务会断线较久,不推荐这样做。

FW1
hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.2
hrp mirror sessio enable //在负载分担模式下一般要开启快速会话备份功能

vlan 2
port g1/0/0
prot g1/0/1
hrp track action
hrp track standby

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.1 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy //暂时全允许
default action permit

FW2:

hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.1
hrp mirror sessio enable //在负载分担模式下一般要开启快速会话备份功能

vlan 2
port g1/0/0
prot g1/0/1
hrp track standby
hrp track action

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.2 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy
default action permit

查看
dis hrp state ver

你可能感兴趣的:(华为,网络)