H3C SecPath F1800-A Operation Manual page 577

Operation Manual - Reliability
H3C SecPath F1800-A Firewall
Trust zone
DMZ zone
A1, A2, A3, A4, A5, and A6 are interfaces of SecPath A
B1, B2, B3, B4, B5, and B6 are interfaces of SecPath B
Figure 1-10 Networking of load balancing II
The original backup groups are backup groups 1, 2 and 3.
Backup group1 includes Interface A1 on SecPath A and Interface B4 on SecPath
B.
Backup group2 includes Interface A3 on SecPath A and Interface B2 on SecPath
B.
Backup group3 includes Interface A6 on SecPath A and Interface B5 on SecPath
B.
The new backup groups are backup groups 4, 5 and 6.
Backup group4 includes Interface A2 on SecPath A and Interface B3 on SecPath
B.
Backup group5 includes Interface A4 on SecPath A and Interface B1 on SecPath
B.
Backup group6 includes Interface A5 on SecPath A and Interface B6 on SecPath
B.
The management group1 on SecPath A and SecPath B includes backup groups 1, 2
and 3; the management group2 includes backup groups 4, 5 and 6.
SecPath A is:
The master firewall in VRRP management group1
The backup firewall in VRRP management group2
SecPath B is:
Backup Backup
group1 group2
SecPath A
Master / Backup
A1
A6
A2
A3
A5
A4
B4
B3
B5
B6
B2
B1
Backup / Master
SecPath B
Backup Backup
group5 group4
8-14
Chapter 1 Route Redundancy Backup
Backup
group3
Untrust zone
Backup
group6
Actual connection
Traffic