两台F1090做RBM模式的双机热备,一主一备,用华三HCL模拟器,配置好后心跳线死活起不来,但是心跳线的物理链路显示接口up的,能帮忙看一下吗?是RBM没配置好,还是模拟器有问题啊?谢谢
主
# version 7.1.064, Alpha 7164
# sysname firewall
# interface GigabitEthernet1/0/0
port link-mode route
combo enable copper
ip address 10.10.10.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.10.10.254 active
# interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
ip address 20.20.20.2 255.255.255.0
vrrp vrid 2 virtual-ip 20.20.20.254 active
# security-zone name Untrust
import interface GigabitEthernet1/0/0
# security-zone name Untrust02
import interface GigabitEthernet1/0/1
#
ip route-static 0.0.0.0 0 10.10.10.1
# security-policy ip
rule 1 name vrrp
action pass
logging enable
counting enable
source-zone Local
source-zone Trust
source-zone Untrust
source-zone Untrust02
destination-zone Local
destination-zone Trust
destination-zone Untrust
destination-zone Untrust02
service vrrp
rule 0 name own
description Management
action pass
logging enable
counting enable
source-zone Untrust
source-zone local
source-zone trust
source-zone Untrust02
source-zone Management
source-zone DMZ
destination-zone local
destination-zone Untrust
destination-zone trust
destination-zone Untrust02
destination-zone Management
destination-zone DMZ
# remote-backup group
data-channel interface GigabitEthernet1/0/23
configuration sync-check interval 12
track interface GigabitEthernet1/0/0
track interface GigabitEthernet1/0/1
local-ip 88.88.88.1
remote-ip 88.88.88.2
device-role primary
# return
备
# version 7.1.064, Alpha 7164
# sysname firewall
# interface GigabitEthernet1/0/0
port link-mode route
combo enable copper
ip address 10.10.10.3 255.255.255.0
vrrp vrid 1 virtual-ip 10.10.10.254 standby
# interface GigabitEthernet1/0/1
port link-mode route
combo enable copper
ip address 20.20.20.3 255.255.255.0
vrrp vrid 2 virtual-ip 20.20.20.254 standby
# security-zone name Untrust
import interface GigabitEthernet1/0/0
# security-zone name Untrust02
import interface GigabitEthernet1/0/1
#
ip route-static 0.0.0.0 0 10.10.10.1
# security-policy ip
rule 1 name vrrp
action pass
logging enable
counting enable
source-zone Local
source-zone Trust
source-zone Untrust
source-zone Untrust02
destination-zone Local
destination-zone Trust
destination-zone Untrust
destination-zone Untrust02
service vrrp
rule 0 name own
description Management
action pass
logging enable
counting enable
source-zone Untrust
source-zone local
source-zone trust
source-zone Untrust02
source-zone Management
source-zone DMZ
destination-zone local
destination-zone Untrust
destination-zone trust
destination-zone Untrust02
destination-zone Management
destination-zone DMZ
# remote-backup group
data-channel interface GigabitEthernet1/0/23
configuration sync-check interval 12
track interface GigabitEthernet1/0/0
track interface GigabitEthernet1/0/1
local-ip 88.88.88.2
remote-ip 88.88.88.1
device-role secondary
# return
(1)
这个模拟器可能存在问题,建议真机测试
参考官网典配配置一下
https://www.h3c.com/cn/d_202206/1628473_30005_0.htm#_Toc106722943
(0)
这两个地址可以通吗?
这两个地址可以通吗?
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明