H3C防火墙RBM对接交换机M-LAG典型配置

FW配置：FW1与FW2采用RBM组网，M-LAG Border的跨设备二层聚合口与RBM FW设备的设备内三层聚合口对接。FW主设备的设备内三层聚合口编号应与备设备的设备内三层聚合口编号保持一致。防火墙省略安全域和安全策略配置。
Border设备配置：采用M-LAG组网，Border1与Border2之间一条直连链路聚合作为peer-link链路，一条直连链路作为M-LAG MAD链路。

配置步骤
FW配置如下：

FW1	FW2

HA接口配置 #
interface Route-Aggregation1024
ip address 192.168.1.1 255.255.255.252
link-aggregation mode dynamic

interface Route-Aggregation1024
ip address 192.168.1.2 255.255.255.252
link-aggregation mode dynamic

业务接口配置 #
interface HundredGigE1/0/25
port link-mode route
port link-aggregation group 10

interface HundredGigE1/0/27
port link-mode route
port link-aggregation group 10

interface Route-Aggregation10
link-aggregation mode dynamic

interface Route-Aggregation10.10
ip address 10.9.68.1 255.255.255.0
vrrp vrid 10 virtual-ip 10.9.68.10 active
vlan-type dot1q vid 10

interface HundredGigE1/0/25
port link-mode route
port link-aggregation group 10

interface HundredGigE1/0/27
port link-mode route
port link-aggregation group 10

interface Route-Aggregation10
link-aggregation mode dyna