华三防火墙IRF堆叠心跳的BFD MAD配置 :
在这里插入图片描述
防火墙A配置

irf member 1 priority 32
#
interface range GigabitEthernet 1/0/21 to GigabitEthernet 1/0/22
shutdown
#
irf-port 1/2
 port group interface GigabitEthernet1/0/21
 port group interface GigabitEthernet1/0/22
#
interface range GigabitEthernet 1/0/21 to GigabitEthernet 1/0/22
no shutdown
#
save force
#
irf-port-configuration active
#

防火墙B配置

irf member 1 renumber 2
#
save force
#
reboot
#
interface range GigabitEthernet 2/0/21 to GigabitEthernet 2/0/22
shutdown
#
irf-port 2/1
 port group interface GigabitEthernet2/0/21
 port group interface GigabitEthernet2/0/22
#
interface range GigabitEthernet 2/0/21 to GigabitEthernet 2/0/22
no shutdown
#
save force
#
irf-port-configuration active

BFD MAD

  • 适用场景:成员设备间物理距离近、接口资源充足,且无需依赖聚合链路。
  • 优势:检测速度快,支持跨设备组网,适合高可靠性要求的场景。
  • 示例:两台防火墙直连,通过独立链路进行MAD检测。
interface Route-Aggregation 1
#
interface GigabitEthernet1/0/23
 port link-mode route
 port link-aggregation group 1
#
interface GigabitEthernet2/0/23
 port link-mode route
 port link-aggregation group 1
 #
 interface Route-Aggregation 1
 description mad
 mad bfd enable
 mad ip address 1.1.1.1 255.255.255.252 member 1
 mad ip address 1.1.1.2 255.255.255.252 member 2

删除BFD配置

interface Route-Aggregation 1
undo mad bfd enable
interface GigabitEthernet1/0/23
undo port link-aggregation group
interface GigabitEthernet2/0/23
undo port link-aggregation group
Logo

腾讯云面向开发者汇聚海量精品云计算使用和开发经验,营造开放的云计算技术生态圈。

更多推荐