Nortel Switched Firewall 2.3.3 User’s Guide and Command Reference
130
Redundant Firewalls
213455-L, October 2005
4.
Configure the VRRP interfaces on both Switched Firewalls.
Log on to
firewall NSF#1
as the administrator and configure the interfaces.
5.
Configure the VRRP virtual IP addresses.
N
OTE
–
It is not necessary to configure ip2 for active-standby (high availability). However, if
you are configuring active-active failover, then assign a specific value for ip2. For example,
/cfg/net/if 2/vrrp/ip2 10.1.1.200
and
/cfg/net/if 3/vrrp/ip2
20.1.1.200
.
The VRRP virtual IP addresses must be on the same network as their router IP addresses.
6.
Enter the virtual router ID (vrid).
Each virtual router interface gets a unique vrid, which is used to generate the virtual router
MAC address (see
MAC address mapping on page 121
).
N
OTE
—
Vrids must be at least one number apart (for example, vrids 33 and 34 would not be
acceptable; vrids 33 and 35 are acceptable)
.
>> Main# /cfg/net/if 2/addr1 100.1.1.1
>> Main# /cfg/net/if 2/addr2 100.1.1.2
>> Main# /cfg/net/if 2/mask 255.255.255.0
>> Main# /cfg/net/if 2/port 3
>> Main# /cfg/net/if 2/ena
>> Main# /cfg/net/if 3/addr1 200.1.1.1
>> Main# /cfg/net/if 3/addr2 200.1.1.2
>> Main# /cfg/net/if 3/mask 255.255.255.0
>> Main# /cfg/net/if 3/port 4
>> Main# /cfg/net/if 3/ena
>> Main#
/cfg/net/if 2/vrrp/ip1
100.1.1.100
>> Main#
/cfg/net/if 2/vrrp/ip2
0.0.0.0
>> Main#
/cfg/net/if 3/vrrp/ip1
200.1.1.100
>> Main#
/cfg/net/if 3/vrrp/ip2
0.0.0.0
>> Main#
/cfg/net/if 2/vrrp/vrid 33
>> Main#
/cfg/net/if 3/vrrp/vrid 44
