vrrp 1
? SecPath核心防火墙双机热备典型配置举例 #（track vrrp关键字，意思是当接口收到对nat 地址的arp查询时以vrrp 1的虚接地址作为应答！//
PC机IP配置：
PC1：101.0.5.0 PC2：101.0.7.0
3. 验证结果
pc1 业务默认从F5000A-1走。Pc2业务默认从F5000A-2走。 当主机F5000A-1down 全部切换到F5000A-2 4. 注意事项
该组网要注意报文来回路径要保持一致。
4.3.5 路由模式＋主备模式＋支持非对称路径
1. 功能简述（F1000E为例） 功能。
2. 典型配置步骤（组网错误！未找到引用源。） (1) 命令行配置：
f1000E01: #
version 5.20, Feature 3101 #
sysname fw01 #
undo voice vlan mac-address 00e0-bb00-0000 #
domain default enable system # vlan 1 #
domain system
access-limit disable state active idle-cut disable
杭州华三通信技术有限公司
www.h3c.com.cn
第21页, 共33页
self-service-url disable #
user-group system #
local-user h3c
? SecPath核心防火墙双机热备典型配置举例 password cipher G`M^B interface Aux0 async mode flow link-protocol ppp # interface NULL0 # interface GigabitEthernet0/0 port link-mode route ip address 192.168.102.31 255.255.252.0 # interface GigabitEthernet0/2 port link-mode route ip address 11.0.0.11 255.0.0.0 vrrp vrid 11 virtual-ip 11.0.0.1 vrrp vrid 11 priority 105 vrrp vrid 11 track interface GigabitEthernet0/3 # interface GigabitEthernet0/3 port link-mode route ip address 12.0.0.11 255.0.0.0 vrrp vrid 122 virtual-ip 12.0.0.2 # interface GigabitEthernet1/1 port link-mode route # interface GigabitEthernet1/2 port link-mode route # interface GigabitEthernet1/3 port link-mode route # interface GigabitEthernet1/4 port link-mode route 杭州华三通信技术有限公司 www.h3c.com.cn 第22页, 共33页 # interface GigabitEthernet1/5 port link-mode route # interface GigabitEthernet1/6 port link-mode route # interface GigabitEthernet1/7 port link-mode route # ? SecPath核心防火墙双机热备典型配置举例 ip route-static 192.168.96.0 255.255.252.0 192.168.100.254 # arp timer aging 1440 # load xml-configuration # user-interface con 0 idle-timeout 0 0 user-interface aux 0 user-interface vty 0 4 F1000e02: # version 5.20, Feature 3101 # sysname fw02 # undo voice vlan mac-address 00e0-bb00-0000 # domain default enable system # vlan 1 # domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system # local-user h3c password cipher G`M^B 杭州华三通信技术有限公司 www.h3c.com.cn 第23页, 共33页 authorization-attribute level 3 service-type telnet # interface Aux0 async mode flow link-protocol ppp # interface NULL0 # interface GigabitEthernet0/0 port link-mode route ? SecPath核心防火墙双机热备典型配置举例 ip address 192.168.102.32 255.255.252.0 # interface GigabitEthernet0/2 port link-mode route ip address 11.0.0.22 255.0.0.0 vrrp vrid 11 virtual-ip 11.0.0.1 # interface GigabitEthernet0/3 port link-mode route ip address 12.0.0.22 255.0.0.0 vrrp vrid 122 virtual-ip 12.0.0.2 vrrp vrid 122 priority 105 vrrp vrid 122 track interface GigabitEthernet0/2 # interface GigabitEthernet1/1 port link-mode route # interface GigabitEthernet1/2 port link-mode route # interface GigabitEthernet1/3 port link-mode route # interface GigabitEthernet1/4 port link-mode route # interface GigabitEthernet1/5 port link-mode route # interface GigabitEthernet1/6 port link-mode route 杭州华三通信技术有限公司 www.h3c.com.cn 第24页, 共33页 # interface GigabitEthernet1/7 port link-mode route # ? SecPath核心防火墙双机热备典型配置举例 ip route-static 192.168.96.0 255.255.252.0 192.168.100.254 # load xml-configuration # user-interface con 0 idle-timeout 0 0 user-interface aux 0 user-interface vty 0 4 数据流向： Http/ftp/dns serverG0/3F1000e-01F1000e-02PC1 WEB配置： 杭州华三通信技术有限公司 www.h3c.com.cn 第25页, 共33页