HP 3600 v2 Series Security Configuration Manual page 183

When Switch A works normally, Host accesses Switch A for portal authentication before accessing
•
the Internet; when Switch A fails, Host accesses the Internet through Switch B. The VRRP
uplink/downlink detection mechanism is used to ensure non-stop traffic forwarding.
Use the RADIUS server as the authentication/accounting server. In this example, Server takes the
•
responsibilities of the portal server and the RADIUS server.
Switch A and Switch B use the failover link to transmit stateful failover related packets and specify
•
VLAN 8 on the switches as the VLAN dedicated for stateful failover related packets.
Figure 72 Network diagram
Vlan-int20
192.168.0.5/24
Switch A
Vlan-int10
9.9.1.5/24
Configuration procedure
NOTE:
Configure IP addresses for the host, server, and switches as shown in
•
can reach to each other.
• Make sure that Host can access the authentication server through Switch A and Switch B respectively.
Configure VRRP group 1 and VRRP group 2 to implement backup for downstream and upstream links
•
respectively. For more information about VRRP, see
For information about stateful failover configuration, see
•
Configure the portal server (iMC PLAT 5.0)
1.
NOTE:
This example assumes that the portal server runs iMC PLAT 5.0(E0101) and iMC UAM 5.0(E0101).
# Configure the portal server.
Server
IP: 192.168.0.111/24
Gateway: 192.168.0.1/24
L2 Switch
Virtual IP address 2:
Master
192.168.0.1/24
Failover link
VLAN8
Virtual IP address 1:
Master
9.9.1.1/24
L2 Switch
Host
IP: 9.9.1.2/24
Gateway: 9.9.1.1/24
Backup
Vlan-int20
192.168.0.6/24
VLAN8
Switch B
Vlan-int10
9.9.1.6/24
Backup
High Availability Configuration Guide
High Availability Configuration Guide
172
Figure 72 and make sure that they
.
.