Configuring link groups on the firewall

3

Mechanism of the HA link group on the firewall
1. In hot standby environment, add the upstream and downstream service interfaces to the same link group. When an interface is faulty and becomes down, it triggers the status of all interfaces in the group to be down. This guarantees fast route convergence on the upstream and downstream routers.

2. The link-group function binds the status of several interfaces to form a logical group. If any of the interfaces in the link-group fails, the system changes the status of all other interfaces to Down. After all interfaces in the group recover, the system changes the interfaces to Up. The link-group function guarantees that the upstream and downstream interfaces are in the same status. This prevents inconsistent upstream and downstream link paths after active/standby switchover.
You are advised not to add interfaces on interface cards 18FE+2SFP, 16GE+4SFP, 5FSW, and 8FE+2GE to the link-group. Using them first is recommended.

3. Configure or delete the link group primary
interface or interfaces on other interface cards through the web UI.
a. Choose System > High Availability > Link Group.
b. In Link Group, select the link group to be configured and modify it.
c. Perform as follows to add the interface to or remove it from the link group.
Add the interface to the link group. In the Available group box, select one or multiple interfaces or double-click an interface.
To add all interfaces to the link group, click All.
After the configuration succeeds, added interfaces are displayed in the Selected group box.
Remove the interface from the link group. In the Selected group box, select one or multiple interfaces or double-click an interface.
To remove all interfaces from the link group, click Clear.
After the configuration succeeds, removed interfaces are displayed in the Available group box.
d. Click Apply.

4. CLI configuration method:
Run the system-view command to access the system view.
Run the interface interface-type interface-number command to enter the interface view.
Run the link-group link-group-id command to add the interface to the link group.
Run the undo link-group command to remove the interface from the link group.

Other related questions:
Whether the firewall supports adding Eth-Trunk to a link group
Adding the Eth-Trunk interface to the link group on the USG The Eth-Trunk interface can be added to the link group. The link group status is Down only when all member interfaces of the Eth-Trunk are Down.

Link group configuration scenario of an AR router
The link-group command is used to create a link group in the SPR and access the link group view. In actual application, link requirements vary with services. To facilitate link deployment and reuse, add the links into a group, and apply services to the link group to implement link selection. The use of the link group needs to be supported by the smart policy routing parameters, and ACLs that differentiate service flows. For details about the configuration, see the URL: Example for Configuring SPR.

How to configure load balancing in a link aggregation group
Run the load-balance { dst-ip | dst-mac | src-ip | src-mac | src-dst-ip | src-dst-mac } command in the Eth-Trunk view. The default load balancing mode of the S3700HI, S5700HI, S5706, and S6700 is src-dst-ip; the default load balancing mode of other switches is src-dst-mac.

What is the difference between the link aggregation group in LACP mode and in manually configured link aggregation group in terms of forwarding performance
For S series switches (except the S1700), there is no difference between an LACP aggregation group and a manually configured link aggregation group in terms of forwarding performance.

Link-Group definition on the USG2000 and USG5000
The Link-Group function can bind the states of multiple interfaces as a logical group. When any interface in the group is faulty, the system sets the state of other interfaces in the group as Down. After all interfaces in the group resume to be normal, the system sets the state of the interfaces in the entire group to Up again.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top