华为防火墙二层透明模式下双机热备主备备份配置（两端为交换机）

这种模式只能是主备备份模式，不能是负载分担，因为会有环路。
故障切换是，如果主故障，主设备所有接口全都会down状态，然后再up一次，用于改变mac转发表。

FW1

hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.2

vlan 2
port g1/0/0
prot g1/0/1
hrp track action

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.1 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy //暂时全允许
default action permit

FW2:

hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.1

vlan 2
port g1/0/0
prot g1/0/1
hrp track standby

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.2 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy
default action permit

查看
dis hrp state ver