5.8 防火墙链路高可靠性技术

1.FW1配置

interface Eth-Trunk 12
trunkport GigabitEthernet 1/0/5 to 1/0/6
ip address 10.10.0.1 255.255.255.0
service-manage all permit

firewall zone dmz
add interface Eth-Trunk12

 hrp enable
hrp interface Eth-Trunk 12 remote 10.10.0.2
 hrp mirror session enable
 hrp track interface GigabitEthernet1/0/1
 hrp track interface GigabitEthernet1/0/2

2.FW2配置

interface Eth-Trunk 12
trunkport GigabitEthernet 1/0/5 to 1/0/6
ip address 10.10.0.2 255.255.255.0
service-manage all permit

firewall zone dmz
add interface Eth-Trunk12

 hrp enable
hrp interface Eth-Trunk 12 remote 10.10.0.1
 hrp mirror session enable
 hrp track interface GigabitEthernet1/0/1
 hrp track interface GigabitEthernet1/0/2