IP-Link definition on the USG

3

IP-Link indicates the link accessibility check. The firewall periodically sends ICMP echo requests or ARP requests to the specified destination IP address and waits for responses. If no response is received with the specified period of time, the firewall considers that the current link is faulty and performs subsequent link-related operations. If the firewall receives three consecutive responses over the original link within the subsequently-specified period of time, the firewall considers that the link fault is eliminated and performs subsequent link recovery-related operations.

Other related questions:
IP-Link purposes on the USG
IP-Link is mainly used to automatically detect whether a service link is normal. It can be used to detect the status of a link that is not directly connected to the firewall to ensure service continuity.

Application scenarios of IP-Link on the USG
The major application scenarios of IP-Link include the interworking between IP-Link and hot standby devices, interworking between IP-Link and static routes, interworking between IP-Link and policy-based routing, and interworking between IP-Link and DHCP.

Link-Group definition on the USG2000 and USG5000
The Link-Group function can bind the states of multiple interfaces as a logical group. When any interface in the group is faulty, the system sets the state of other interfaces in the group as Down. After all interfaces in the group resume to be normal, the system sets the state of the interfaces in the entire group to Up again.

Definition of SSL VPN on the USG6000 series
SSL VPN allows mobile employees (called remote users in SSL VPN) to securely access their intranet resources, improving productivity.

Configuring link groups on the firewall
Mechanism of the HA link group on the firewall 1. In hot standby environment, add the upstream and downstream service interfaces to the same link group. When an interface is faulty and becomes down, it triggers the status of all interfaces in the group to be down. This guarantees fast route convergence on the upstream and downstream routers. 2. The link-group function binds the status of several interfaces to form a logical group. If any of the interfaces in the link-group fails, the system changes the status of all other interfaces to Down. After all interfaces in the group recover, the system changes the interfaces to Up. The link-group function guarantees that the upstream and downstream interfaces are in the same status. This prevents inconsistent upstream and downstream link paths after active/standby switchover. You are advised not to add interfaces on interface cards 18FE+2SFP, 16GE+4SFP, 5FSW, and 8FE+2GE to the link-group. Using them first is recommended. 3. Configure or delete the link group primary interface or interfaces on other interface cards through the web UI. a. Choose System > High Availability > Link Group. b. In Link Group, select the link group to be configured and modify it. c. Perform as follows to add the interface to or remove it from the link group. Add the interface to the link group. In the Available group box, select one or multiple interfaces or double-click an interface. To add all interfaces to the link group, click All. After the configuration succeeds, added interfaces are displayed in the Selected group box. Remove the interface from the link group. In the Selected group box, select one or multiple interfaces or double-click an interface. To remove all interfaces from the link group, click Clear. After the configuration succeeds, removed interfaces are displayed in the Available group box. d. Click Apply. 4. CLI configuration method: Run the system-view command to access the system view. Run the interface interface-type interface-number command to enter the interface view. Run the link-group link-group-id command to add the interface to the link group. Run the undo link-group command to remove the interface from the link group.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top