IP-link identifies link faults, the USG adjusts its static routes accordingly to ensure that the link used every time enjoys the highest priority and is reachable, which keeps service continuity.
For example, when intranet users access the Internet, two static routes are available. One route is bound with IP-link. If this link fails, traffic is switched to the other link, ensuring service continuity.
Key configurations for interworking between static routes and IP-link:
1. Configure an IP address for each interface.
<USG> system-view
[USG] interface GigabitEthernet 0/0/1
[USG-GigabitEthernet0/0/1] ip address 192.168.1.1 255.255.255.0
[USG-GigabitEthernet0/0/1] quit
[USG] interface GigabitEthernet 0/0/2
[USG-GigabitEthernet0/0/2] ip address 10.10.1.1 255.255.255.0
[USG-GigabitEthernet0/0/2] quit
2. For the USG series, add interfaces to corresponding security zones and configure interzone packet filtering to ensure network communication. Details are omitted. For the USG BSR/HSR series, you do not need to add interfaces to security zones or configure packet filtering.
3. Configure IP-link to detect the links from the USG to router 1 and router 2.
[USG] ip-link check enable
[USG] ip-link 1 destination 10.10.1.2 mode icmp
[USG] ip-link 2 destination 10.10.1.3 mode icmp
4. Configure static routes to the Internet and bind IP-link. Set a higher priority for the route to router 1.
[USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.2 track ip-link 1
[USG] ip route-static 0.0.0.0 0.0.0.0 10.10.1.3 preference 70 track ip-link 2
5. Set the gateway address to 192.168.1.1 on the intranet PC.