Huawei firewall dual-machine hot standby active backup and load sharing configuration example (running ospf for routing at both ends)

FW1
hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.2
hrp ospf-cost adjust-enable
This command will automatically adjust the ospf value of the main device standby to 65000, plus the original default cost overhead value. If If active, the cost value is not adjusted and is the default cost value.

hrp mirror sessio enable //In load sharing mode, it is generally necessary to enable the fast session backup function

interface GigabitEthernet1/0/0
undo shutdown
ip address 1.1.1.2 255.255.255.0
hrp track active
If it is load balancing, enter one more command: hrp track standby

interface GigabitEthernet1/0/1
undo shutdown
ip address 10.1.1.2 255.255.255.0
hrp track active
If it is load balancing, type one more command: hrp track standby

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.1 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy //temporarily allow all
default action permit

FW2:
hrp enable
hrp interface GigabitEthernet1/0/2 remote 172.16.0.1
hrp ospf-cost adjust-enable

hrp mirror sessio enable //In load sharing mode, it is generally necessary to enable the fast session backup function

interface GigabitEthernet1/0/0
undo shutdown
ip address 2.2.2.2 255.255.255.0
hrp track standby
If it is load balancing, enter one more command: hrp track active

interface GigabitEthernet1/0/1
undo shutdown
ip address 10.1.2.2 255.255.255.0
hrp track standby
If it is load balancing, enter one more command: hrp track active

interface GigabitEthernet1/0/2
undo shutdown
ip address 172.16.0.2 255.255.255.0

firewall zone trust
set priority 85
add interface GigabitEthernet0/0/0
add interface GigabitEthernet1/0/1

firewall zone untrust
set priority 5
add interface GigabitEthernet1/0/0

firewall zone dmz
set priority 50
add interface GigabitEthernet1/0/2

security-policy
default action permit

View
dis hrp state ver