【正文】 /0/2] quit添加接口至對應區(qū)域[Eudemon B]firewall zone trust[Eudemon Bzonetrust]add interface GigabitEthernet 0/0/0[Eudemon Bzonetrust]quit[Eudemon B]firewall zone dmz[Eudemon Bzonedmz]add interface GigabitEthernet 0/0/1[Eudemon Bzonedmz]quit[Eudemon B]firewall zone untrust[Eudemon Bzoneuntrust]add interface GigabitEthernet 0/0/2[Eudemon Bzoneuntrust]quit配置local區(qū)域和dmz區(qū)域的域間包過濾規(guī)則，以便VRRP報文、VGMP報文和HRP報文能夠通過心跳接口正常交互。(2) 配置VRRP備份組并制定備份組所屬的管理組。VRP vrrp vrid virtualrouterID virtualip virtualaddress [ ipmask | ipmasklength ] { slave | master }使能HRP功能。s member same: yes實驗結果驗證四：在PC1上執(zhí)行“ping –t ”，宕掉Eudemon A的接口GE0/0/2，觀察防火墻的主備倒換以及對數據包轉發(fā)的影響。s config state is: MASTER Current state of virtual routers configured as master: GigabitEthernet0/0/2 vrid 2 : master GigabitEthernet0/0/1 vrid 3 : master GigabitEthernet0/0/0 vrid 1 : master Current state of virtual routers configured as slave: GigabitEthernet0/0/2 vrid 5 : slave GigabitEthernet0/0/1 vrid 6 : slave GigabitEthernet0/0/0 vrid 4 : slaveHRP_S[Eudemon B]display hrp state The firewall39。[Eudemon A]hrp interface GigabitEthernet 0/0/1 transferonly[Eudemon A]hrp interface GigabitEthernet 0/0/0[Eudemon A]hrp interface GigabitEthernet 0/0/2使能HRP功能[Eudemon A]hrp enable[Eudemon A]hrp autosync Eudemon B的基本配置：配置主機名Eudemonsystemview[Eudemon]sysname Eudemon B配置接口IP地址[Eudemon B]interface GigabitEthernet 0/0/0[Eudemon B GigabitEthernet0/0/0]ip address 24[Eudemon B GigabitEthernet0/0/0]quit[Eudemon B]interface GigabitEthernet 0/0/1[Eudemon B GigabitEthernet0/0/1]ip address 24[Eudemon B GigabitEthernet0/0/1]quit[Eudemon B]interface GigabitEthernet 0/0/2[Eudemon B GigabitEthernet0/0/2]ip address 24[Eudemon B GigabitEthernet0/0/2]quit添加接口至對應區(qū)域[Eudemon B]firewall zone trust[Eudemon Bzonetrust]add interface GigabitEthernet 0/0/0[Eudemon Bzonetrust]quit[Eudemon B]firewall zone dmz[Eudemon Bzonedmz]add interface GigabitEthernet 0/0/1[Eudemon Bzonedmz]quit[Eudemon B]firewall zone untrust[Eudemon Bzoneuntrust]add interface GigabitEthernet 0/0/2[Eudemon Bzoneuntrust]quit配置VRRP備份組，并指定備份組所屬的管理組。印刷時上段話刪除。查看主備防火墻倒換對于從PC1發(fā)往PC2的數據包的影響。 外部網絡與防火墻的GigabitEthernet 0/0/2接口相連，部署在Untrust區(qū)域?？梢酝ㄟ^在Eudemon B上配置trust區(qū)域和untrust區(qū)域的域間包過濾規(guī)則解決上述問題。s member same: yes Slave group status: Group enabled: no State: initialize Priority running: 65000 Total VRRP members: 0 Hello interval(ms): 1000 Preempt delay(s): 30 Peer group available: 1 Peer39。HRP_M[Eudemon A]display vrrp GigabitEthernet0/0/2 | Virtual Router 3 state : Master Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONE Check TTL : YES GigabitEthernet0/0/1 | Virtual Router 2 state : Master Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONE Check TTL : YES GigabitEthernet0/0/0 | Virtual Router 1 state : Master Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONECheck TTL : YESHRP_S[Eudemon B]display vrrp GigabitEthernet0/0/2 | Virtual Router 3 state : Backup Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONE Check TTL : YES GigabitEthernet0/0/1 | Virtual Router 2 state : Backup Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONE Check TTL : YES GigabitEthernet0/0/0 | Virtual Router 1 state : Backup Virtual IP : PriorityRun : 100 PriorityConfig : 100 MasterPriority : 100 Preempt : YES Delay Time : 0 Timer : 1 Auth Type : NONE Check TTL : YES通過以上結果可知， Eudemon A在三個備份組中都處于Master狀態(tài)；Eudemon B在三個備份組中都處于Backup狀態(tài)。 具體配置及實驗結果驗證 Eudemon A的基本配置：配置主機名Eudemonsystemview[Eudemon]sysname Eudemon A配置接口IP地址[Eudemon A]interface GigabitEthernet 0/0/0[Eudemon A GigabitEthernet0/0/0]ip address 24[Eudemon A GigabitEthernet0/0/0]quit[Eudemon A]interface GigabitEthernet 0/0/1[Eudemon A GigabitEthernet0/0/1]ip address 24[Eudemon A GigabitEthernet0/0/1]quit[Eudemon A]interface GigabitEthernet 0/0/2[Eudemon AEthernet0/0/2]ip address 24[Eudemon AEthernet0/0/2]quit添加接口至對應區(qū)域[Eudemon A]firewall zone trust[Eudemon Azonetrust]add interface GigabitEthernet 0/0/0[Eudemon Azonetrust]quit[Eudemon A]firewall zone dmz[Eudemon Azonedmz]add interface GigabitEthernet 0/0/1[Eudemon Azonedmz]quit[Eudemon A]firewall zone untrust[Eudemon Azoneuntrust]add interface GigabitEthernet 0/0/2[Eudemon Azoneuntrust]quit配置VRRP備份組，并指定備份組所屬的管理組。VRP hrp autosync [ config [ batchbackup ] | connectionstatus ]編寫提示：通過表格的形式列舉實驗中要使用到的主要的，典型的命令行列。 。版本介紹實驗目的l 掌握Eudemon防火墻雙機熱備的基本原理l 熟悉路由模式+主備組網方式的防火墻雙機熱備技術l 熟悉路由模式+負載分擔組網方式的防火墻雙機熱備技術l 熟悉混合模式+主備組網方式的防火墻雙機熱備技術實驗任務l 完成Eudemon防火墻的基本配置l 配置VRRP備份組l 配置HRP相關資料l Eudemon防火墻產品手冊 配置指南l Eudemon防火墻產品手冊 命令參考第1章 路由模式+主備組網方式的雙機熱備技術在Eudemon防火墻上的部署 組網及業(yè)務描述路由模式+主備組網方式Eudemon作為安全設備被部署在業(yè)務節(jié)點上。 外部網絡與防火墻的GigabitEthernet 0/0/2接口相連，部署在Untrust區(qū)域。查看主備防火墻倒換對于從PC1發(fā)往PC2的數據包的影響。印刷時上段話刪除。[Eudemon A]hrp interface GigabitEthernet 0/0/1 transferonly[Eudemon A]hrp interface GigabitEthernet