Dual-System Hsb Overview; Dual-System Hsb Features Supported By The Spu - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU

7.1 Dual-System HSB Overview

This section describes basic concepts of dual-system HSB.
Firewalls are the nodes that the traffic must pass through on a network. If firewalls are faulty,
services are interrupted on the network. The reliability of firewalls greatly affects HA of the
network.
Through dual-system HSB, the session table can be synchronized between two firewalls in real
time. If a firewall is faulty, user sessions are not interrupted. The HA of user connections is thus
improved.
To ensure HA of a user network and prevent firewall faults from affecting communication
between security zones, the Virtual Router Redundancy Protocol (VRRP) is enabled between
firewalls and the firewall status is synchronized between firewalls. As shown in
FWA and FWB constitute a VRRP backup group that function as a virtual FW.
l
l
l
Figure 7-1 Networking of dual-system HSB
Server

7.2 Dual-System HSB Features Supported by the SPU

This section describes the dual-system HSB features supported by the SPU.
Issue 01 (2011-07-15)
NOTE
A firewall can be enabled with dual-system HSB. That is, dual-system HSB can be enabled on the
S7700 that supports the firewall function. The dual system and S7700 are hereinafter referred to as the FW.
A host on the LAN only learns the IP address of the virtual FW, but does not learn IP
addresses of interfaces of FWA and FWB in the VRRP backup group.
A host on the LAN sets the default next hop address as the IP address of the virtual FW.
Then the host on the LAN communicates with other networks through the virtual FW.
In the VRRP backup group, one device is in active state, which is the master device such
as FWA shown in Figure
device such as FWB shown in
PC
Internal network
VRRP Backup group
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7-1. The other device is in backup state, which is the backup
Figure 7-1.
FWA: Master
FWB: Backup
7 Dual-System HSB Configuration
Figure
Network
VRRP Backup group
7-1,
339