Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Applicable Environment
To ensure HA of a user network and prevent firewall faults from affecting communication
between security zones, VRRP is enabled between firewalls that function as a virtual firewall,
and the firewall status is synchronized between firewalls.
Pre-configuration Tasks
Before configuring dual-system HSB, complete the following tasks:
l
l
l
Data Preparation
To configure dual-system HSB, you need the following data.
No.
1
2
3
4
7.3.2 Enabling Dual-System HSB
Configure HSB actions only after dual-system HSB is enabled.
Context
When two devices are deployed at the egress of the network to protect the security of the internal
network, you need to configure dual-system HSB. The channel through which dual-system HSB
is synchronized can be set up only after dual-system HSB is enabled.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
hot-standby enable
Dual-system HSB is enabled.
By default, dual-system HSB is disabled.
----End
Issue 01 (2012-03-15)
Setting the firewall service on the S9700
Setting IP address of the sub-interface configured with the firewall service
Configuring VRRP between firewalls
Data
Number and IP address of the Eth-Trunk of the local firewall
Number and IP address of the Eth-Trunk of the peer firewall
ID and virtual IP address of the VRRP backup group
Priorities of local and peer firewalls in the VRRP backup group
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 Dual-System HSB Configuration
301
Advertisement
Table of Contents
