![Huawei Quidway NetEngine40E Configuration Manual - Reliability Download Page 1386](http://html.mh-extra.com/html/huawei/quidway-netengine40e/quidway-netengine40e_configuration-manual-reliability_1694531386.webp)
# Bind HA backup group 21 to VRRP backup group 10 on CGN1, and specify the interface for
establishing a VRRP connection with CGN2 as GE 3/1/7.
[CGN1]
service-location 21
[CGN1-service-location-21]
vrrp vrid 10 interface GigabitEthernet 3/1/7
[CGN1-service-location-21]
quit
# Bind HA backup group 21 to VRRP backup group 10 on CGN2, and specify the interface for
establishing a VRRP connection with CGN1 as GE 3/1/7.
[CGN2]
service-location 21
[CGN2-service-location-21]
vrrp vrid 10 interface GigabitEthernet 3/1/7
[CGN2-service-location-21]
quit
Step 5
Create a service instance group on CGN1 and CGN2 and bind it to the HA backup group.
# Create service instance group 21 on CGN1 and bind it to HA backup group 21.
[CGN1]
service-instance-group 21
[CGN1-service-instance-group-21]
service-location 21
[CGN1-service-instance-group-21]
quit
# Create service instance group 21 on CGN2 and bind it to HA backup group 21.
[CGN2]
service-instance-group 21
[CGN2-service-instance-group-21]
service-location 21
[CGN2-service-instance-group-21]
quit
NOTE
Run the
display service-location 21
command on CGN1 and CGN2 to view HA information.
Vrrp
state
in the command output reflects the status of HA backup group 21, which must be consistent with the
CGN's VRRP status.
Batch-backup state
in the command output indicates whether batch backup has been
finished.
Step 6
Create a DS-Lite instance on CGN1 and CGN2, bind the DS-Lite instance to the service instance
group, and configure an address pool and an address translation policy.
# Create a DS-Lite instance named
dslite1
on CGN1, bind the DS-Lite instance to service
instance group 21, and set the port range to 4096. Configure a DS-Lite address pool named
group1
in dslite1, and configure an address section for the DS-Lite address pool. Set the DS-
Lite action to
any
so that traffic does not need to match any ACL rule and DS-Lite translation
is performed for traffic using addresses from the DS-Lite address pool. Configure local and
remote IP addresses in dslite1, enable DS-Lite ALG for all protocols, and set the DS-Lite address
translation mode to
full-cone
.
[CGN1]
ds-lite instance dslite1 id 21
[CGN1-ds-lite-instance-dslite1]
port-range 4096
[CGN1-ds-lite-instance-dslite1]
service-instance-group 21
[CGN1-ds-lite-instance-dslite1]
ds-lite address-group group1 group-id 1
[CGN1-ds-lite-instance-dslite1-ds-lite-address-group-group1]
section 0 60.1.2.3
mask 24
[CGN1-ds-lite-instance-dslite1-ds-lite-address-group-group1]
quit
[CGN1-ds-lite-instance-dslite1]
ds-lite outbound any address-group group1
[CGN1-ds-lite-instance-dslite1]
local-ipv6 240E:3:D000::12 prefix-length 128
[CGN1-ds-lite-instance-dslite1]
remote-ipv6 240E:A3:D000:: prefix-length 41
[CGN1-ds-lite-instance-dslite1]
ds-lite alg all
[CGN1-ds-lite-instance-dslite1]
ds-lite filter mode full-cone
# Create a DS-Lite instance named
dslite1
on CGN2, bind the DS-Lite instance to service
instance group 21, and set the port range to 4096. Configure a DS-Lite address pool named
group1
in dslite1, and configure an address section for the DS-Lite address pool. Set the DS-
Lite action to
any
so that traffic does not need to match any ACL rule and DS-Lite translation
is performed for traffic using addresses from the DS-Lite address pool. Configure local and
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
12 CGN Backing Up HA Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1369