Method used to configure the interworking between IP-Link and policy-based routing on the USG2000 and USG5000

Policy-based routing modes of the USG2000 and USG5000 are as follows:
1. Networking requirement

To satisfy traffic requirements of department A and department B, the company adopts links ISP1 and ISP2 that connect to the Internet to share traffic and mutually back up, so as to ensure link continuity.
The specific requirements are as follows:
a. Department A uses network segment 10.1.0.0/16. Normally, Internet access traffic of this department is carried by link ISP1.
b. Department B uses network segment 20.1.0.0/16. Normally, Internet access traffic of this department is carried by link ISP2.
c. Links of department A and department B are mutually backed up. When the link (active link) of a department is fault, traffic is switched over to the link (standby link) of another department.

2. Configuration principles

The principles for configuring interworking between IP-Link and policy-based routing are as follows:
a. To enable different links carry different traffic, you need to configure the source address-based policy-based routing, so that Internet access traffic of department A is carried by link ISP1, and Internet access traffic of department B is carried by link ISP2.
b. To enable links of department A and department B to mutually back up each other and ensure link continuity, you need to configure as follows:
(1) Configure the interworking between policy-based routing and IP-Link. IP-Link monitors the accessibility of respective active links of department A and department B. When an active link is faulty, policy-based routing becomes invalid. The firewall looks up the backup route to ensure service continuity.
(2) Configure a static route from department A to link ISP2 and a static link from department B to link ISP1, as the backup routes of department A and department B. In addition, configure the interworking between the statics and IP-Link. IP-Link monitors the accessibility of respective standby links of department A and department B.
For specific configurations, click link url=" http://support.huawei.com/ehedex/pages/DOC100000933430002967/06/DOC100000933430002967/06/resources/cfg_ha/sec_vsp_cfg_iplink_0014.html?ft=0&id=sec_vsp_cfg_iplink_0014"> Configuring the Interworking Between IP-Link and PBR.

Scroll to top