IP-Link purposes on the USG


IP-Link is mainly used to automatically detect whether a service link is normal. It can be used to detect the status of a link that is not directly connected to the firewall to ensure service continuity.

Other related questions:
Configuring link groups on the firewall
Mechanism of the HA link group on the firewall 1. In hot standby environment, add the upstream and downstream service interfaces to the same link group. When an interface is faulty and becomes down, it triggers the status of all interfaces in the group to be down. This guarantees fast route convergence on the upstream and downstream routers. 2. The link-group function binds the status of several interfaces to form a logical group. If any of the interfaces in the link-group fails, the system changes the status of all other interfaces to Down. After all interfaces in the group recover, the system changes the interfaces to Up. The link-group function guarantees that the upstream and downstream interfaces are in the same status. This prevents inconsistent upstream and downstream link paths after active/standby switchover. You are advised not to add interfaces on interface cards 18FE+2SFP, 16GE+4SFP, 5FSW, and 8FE+2GE to the link-group. Using them first is recommended. 3. Configure or delete the link group primary interface or interfaces on other interface cards through the web UI. a. Choose System > High Availability > Link Group. b. In Link Group, select the link group to be configured and modify it. c. Perform as follows to add the interface to or remove it from the link group. Add the interface to the link group. In the Available group box, select one or multiple interfaces or double-click an interface. To add all interfaces to the link group, click All. After the configuration succeeds, added interfaces are displayed in the Selected group box. Remove the interface from the link group. In the Selected group box, select one or multiple interfaces or double-click an interface. To remove all interfaces from the link group, click Clear. After the configuration succeeds, removed interfaces are displayed in the Available group box. d. Click Apply. 4. CLI configuration method: Run the system-view command to access the system view. Run the interface interface-type interface-number command to enter the interface view. Run the link-group link-group-id command to add the interface to the link group. Run the undo link-group command to remove the interface from the link group.

IP-Link definition on the USG
IP-Link indicates the link accessibility check. The firewall periodically sends ICMP echo requests or ARP requests to the specified destination IP address and waits for responses. If no response is received with the specified period of time, the firewall considers that the current link is faulty and performs subsequent link-related operations. If the firewall receives three consecutive responses over the original link within the subsequently-specified period of time, the firewall considers that the link fault is eliminated and performs subsequent link recovery-related operations.

Application scenarios of IP-Link on the USG
The major application scenarios of IP-Link include the interworking between IP-Link and hot standby devices, interworking between IP-Link and static routes, interworking between IP-Link and policy-based routing, and interworking between IP-Link and DHCP.

what the purpose of the USG2000 and USG5000 series equipment configured IP-Link
IP-Link is mainly used for automatic detection of the normal link or not, can be detected with the FW is not directly linked to the state of the link, to ensure business continuity.

Purposes of the Link-Group on the USG2000 and USG5000
The Link-Group ensures the state consistency of physical interfaces in a group and accelerates the route convergence speed upon link failures.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top