Must I set a physical IP address for the uplink or downlink interface after I set the virtual IP address of the VRRP group on the interface

13

Yes. You must set a physical IP address for the interface before you set the virtual IP address of the VRRP group on the interface. The physical IP address and the virtual address of the VRRP group can reside on the same network segment or different network segments.

Other related questions:
Whether the physical IP address of an upstream or downstream interface needs to be set after a virtual IP address of the VRRP group is set on this interface
Yes.

Does the AR support difference of network segments between an interface IP address and a virtual IP address of VRRP
The AR does not support difference of network segments between an interface IP address and a virtual IP address of VRRP. The IP addresses must be set to the same network segment.

Whether the firewall supports the VRRP group virtual IP address and interface address that are on different network segments
Can actual interface IP addresses reside on the same network segment as virtual IP addresses in hot standby? 1. You must assign IP addresses to a physical interface before you set the virtual IP address of the VRRP group on the interface. 2. When you configure VRRP groups, ensure that the virtual IP addresses is not the IP address of any physical interface. 3. Invalid address, such as broadcast address, multicast address, or loopback address, cannot be used as the VRRP virtual IP address. 4. If the virtual IP address and the IP address of the physical interface reside on different subnets, you need to specify the subnet mask of the virtual IP address. 5. The VRID of the VRRP group cannot be the same as that configured on any other device in the same VLAN. 6. The VRIDs and virtual IP addresses of VRRP groups configured for the same interfaces on the active and standby USGs shall be the same. Configuration on the USG6000 [USG6600-1]int vlani2 [USG6600-1-Vlanif2]ip add 172.16.1.1 24 [USG6600-1-Vlanif2]vrrp vrid 1 virtual-ip 10.1.1.1 24 active [USG6600-1-Vlanif2]dis thi interface Vlanif2 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.1 255.255.255.0 active Configuration on the USG2000&5000 [USG5500]int vlanif10 [USG5500-Vlanif10]ip add 172.16.1.1 24 [USG5500-Vlanif10]vrrp vrid 1 virtual-ip 10.10.1.1 24 master [USG5500-Vlanif10]dis this interface Vlanif10 alias vlanif 10 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.10.1.1 255.255.255.0 master #

For an S series switch, can the virtual IP address of the VRRP group and the secondary interface IP address be on the same network segment
For S series switches (S1700 excluded), the secondary IP address and the VRRP virtual IP address can be on the same network segment.

Configuring virtual IP addresses of VRRP groups on the USG6000
Configuring virtual IP addresses of VRRP groups on the USG6000 sys //Access the system view. [USG6600-1] int g1/0/9 //Access the Layer 3 interface. [USG6600-1-GigabitEthernet1/0/9]ip add 1.1.1.1 24 //Configure the interface IP address. [USG6600-1-GigabitEthernet1/0/9]vrrp vrid 1 virtual-ip 1.1.1.254 active (virtual IP address of the VRRP group) //Configure the virtual IP address of the VRRP group.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top