双机热备直路部署 -- 上下三层
双机热备直路部署的特点是防火墙接口都是三层工作模式,相当于防火墙在进行路由部
署。
![](https://i-blog.csdnimg.cn/blog_migrate/bb3790a1d28143d9e4134f577acc1fa0.png)
1. 根据网段划分配置IP地址和安全区域
AR1配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 1.1.1.2 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 3.3.3.1 24
[Huawei]ospf 1 router-id 1.1.1.1
[Huawei-ospf-1]a 0
[Huawei-ospf-1-area-0.0.0.0]network 1.1.1.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 3.3.3.0 0.0.0.255
AR2配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip ad 2.2.2.2 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 3.3.3.2 24
[Huawei]ospf 1 router-id 2.2.2.2
[Huawei-ospf-1]a 0
[Huawei-ospf-1-area-0.0.0.0]network 3.3.3.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 2.2.2.0 0.0.0.255
AR3配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 5.5.5.1 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 7.7.7.1 24
[Huawei]ospf 1 router-id 3.3.3.3
[Huawei]a 0
[Huawei-ospf-1-area-0.0.0.0]network 5.5.5.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 7.7.7.0 0.0.0.255
AR4配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 6.6.6.1 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 7.7.7.2 24
[Huawei]ospf 1 router-id 4.4.4.4
[Huawei-ospf-1]a 0
[Huawei-ospf-1-area-0.0.0.0]network 6.6.6.0 0.0.0.255
[Huawei-ospf-1-area-0.0.0.0]network 7.7.7.0 0.0.0.255