Route Redundancy Backup On The Secpath F1800-A; Disadvantages Of Traditional Vrrp On Secpath F1800-A Backup - H3C SecPath F1800-A Operation Manual

Operation Manual - Reliability
H3C SecPath F1800-A Firewall
As a result, the VRRP can make communication uninterrupted; communication
becomes reliable.

1.2 Route Redundancy Backup on the SecPath F1800-A

In the current networking application, users have higher demand for network
reliability.
Especially, they require that communication should be uninterrupted:
At some important service ingress
At access points
At the enterprise Internet access point
On the bank database server
As a security device, the SecPath F1800-A is usually located at the service access
point between a protected network and an unprotected network.
If only one SecPath F1800-A is located at the service point, the network may be
interrupted due to single point failure, though the SecPath F1800-A is very reliable.
In this case, redundancy backup mechanism is offered to improve the stability and
reliability of the entire system.

1.2.1 Disadvantages of Traditional VRRP on SecPath F1800-A Backup

Security zone is introduced in the SecPath F1800-A. Two SecPath F1800-A firewalls
can implement a route redundancy backup. One acts as the master firewall; the other
acts as the backup firewall. Interfaces on each firewall are associated with security
zones.
I. Typical Networking of SecPath F1800-A Backup
Based on the traditional VRRP, each zone needs a VRRP group to monitor the
working state of interfaces that are connected with zones; that is, interfaces
connected with each zone on the SecPath F1800-A form a backup group (the virtual
router) and each group is assigned with a virtual IP address, as shown in
Chapter 1 Route Redundancy Backup
8-3
Figure 1-3.