华三F1060防火墙+ 静态路由nqa+track

您好，请知：

需看下NQA，track是否已经按官网的用户手册要求配置完成。

以下是NQA的关键配置点，请参考：

[SW2]nqa agent enable 

[SW2]nqa entry weijianing ninglihua

[SW2-nqa-weijianing-ninglihua]type icmp-echo

[SW2-nqa-weijianing-ninglihua-icmp-echo]source int GigabitEthernet 1/0/1

[SW2-nqa-weijianing-ninglihua-icmp-echo]destination ip 10.0.0.2

[SW2-nqa-weijianing-ninglihua-icmp-echo]frequency 100000

[SW2-nqa-weijianing-ninglihua-icmp-echo]probe timeout 30

[SW2-nqa-weijianing-ninglihua-icmp-echo]next-hop 10.0.0.2

[SW2-nqa-weijianing-ninglihua-icmp-echo] history-record enable

[SW2-nqa-weijianing-ninglihua-icmp-echo]history-record number 50

[SW2-nqa-weijianing-ninglihua-icmp-echo]probe count 10

[SW2-nqa-weijianing-ninglihua-icmp-echo]probe timeout 30

[SW2-nqa-weijianing-ninglihua-icmp-echo]reaction 1 checked-element probe-fail threshold-type consecutive 1 action-type trigger-only

[SW2-nqa-weijianing-ninglihua-icmp-echo]route-option bypass-route

[SW2]track 1 nqa entry weijianing ninglihua reaction 1

[SW2]nqa schedule weijianing ninglihua start-time now lifetime forever

同时将track应用到相应的位置，请参考如下应用方法：

[SW2]int vlan 10

[SW2-Vlan-interface10]ip address 192.168.10.252 24

[SW2-Vlan-interface10]vrrp vrid 1 vi

[SW2-Vlan-interface10]vrrp vrid 1 virtual-ip 192.168.10.254

[SW2-Vlan-interface10]vrrp vrid 1 priority 120

[SW2-Vlan-interface10]vrrp vrid 1 preempt-mode

[SW2-Vlan-interface10]vrrp vrid 1 track 1 priority reduced 30

如果已经确认所有配置已经完成，版本不是最新的话，可考虑升级到最新看下。

以下是F1000的用户手册连接，请参考NQA、TRACK部分：

https://www.h3c.com/cn/Service/Document_Software/Document_Center/IP_Security/FW_VPN/F10X0/