Huawei USG Firewall backup-hrp and ip-link Linkage
Fw1:
InterfaceGigabitEthernet0/0/0
Ip address 192.168.1.2 255.255.255.0
Hrp track master
InterfaceGigabitEthernet0/0/1
Ip address 202.100.1.1 255.255.255.0
Hrp track master
Hrp mirror sessionenable
Hrp enable
Hrp ospf-costadjust-enable
Hrp interfaceGigabitEthernet0/0/2
Ip-link check enable
Ip-link 1destination 100.100.100.100 interface g0/0/1 mode icmp
Hrp track ip-link 1master
Fw2:
InterfaceGigabitEthernet0/0/0
Ip address 192.168.2.2 255.255.255.0
Hrp track slave
InterfaceGigabitEthernet0/0/1
Ip address 202.100.2.1 255.255.255.0
Hrp track slave
Hrp mirror sessionenable
Hrp enable
Hrp ospf-costadjust-enable
Hrp interfaceGigabitEthernet0/0/2
Ip-link check enable
Ip-link 1destination 100.100.100.100 interface g0/0/1 mode icmp
Hrp track ip-link 1salve
-
View HRP status:
HRP_ M[FW1] dis hrpstate
09:49:06 2014-07-24
The firewall's config state is: MASTER
Current state of interfaces tracked by master:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: up
HRP_ S[FW2] dis hrpstate
09:49:27 2014-07-24
The firewall's config state is: SLAVE
Current state of interfaces tracked by slave:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: up
-
View ip-link status:
HRP_ M[FW1] disip-link
09:38:14 2014-07-24
Num state timer***-instance ip-address interface-name mode vgmp next-hop
1 up 3 100.100.100.100GE0/0/1 icmp master
HRP_ S[FW2] disip-link
09:38:21 2014-07-24
Num state timer***-instance ip-address interface-name mode vgmp next-hop
1 up 3 100.100.100.100 GE0/0/1 icmp slave
-
When the G0Accord 1 of fw1 or G0UniUniG0 of hrp fails, hrp will switch between the main and the standby.
HRP_ M[FW1] intg0/0/1
HRP_ M [FW1-GigabitEthernet0/0/1] shutdown
HRP_ S [FW1-GigabitEthernet0/0/1] dis hrp state
10:30:25 2014-07-24
The firewall's config state is: SLAVE
Current state of interfaces tracked by master:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: down
HRP_ M[FW2] display hrp state
10:30:56 2014-07-24
The firewall's config state is: MASTER
Current state of interfaces tracked by slave:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: up
When the 100.100.100.100 address of the outside router fails, the ip-link check fails and the hrp master / standby switches.
[Outside-LoopBack0] intg0/0/0
[Outside-GigabitEthernet0/0/0] shutdown (failed to reach 100.100.100.100, ip-link check failed)
HRP_ S[FW1] display hrp state
10:34:28 2014-07-24
The firewall's config state is: SLAVE
Current state of interfaces tracked by master:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: up
HRP_ M[FW2] display hrp state
10:34:46 2014-07-24
The firewall's config state is: MASTER
Current state of interfaces tracked by slave:
GigabitEthernet0/0/0: up
GigabitEthernet0/0/1: up
HRP_ S[FW1] dis ip-link
11:06:44 2014-07-24
Num state timer***-instance ip-address interface-name mode vgmp next-hop
1 down 3 100.100.100.100 GE0/0/1 icmp master
HRP_ M[FW2] dis ip-link
11:07:03 2014-07-24
Num state timer***-instance ip-address interface-name mode vgmp next-hop
1 up 3 100.100.100.100 GE0/0/1 icmp slave
