![Huawei Quidway NetEngine40E Configuration Manual - Reliability Download Page 1410](http://html.mh-extra.com/html/huawei/quidway-netengine40e/quidway-netengine40e_configuration-manual-reliability_1694531410.webp)
NOTE
The configuration of CGN2 is the same as that of CGN1. Details for the configuration procedure are not
provided here.
After the configuration is completed, run the display service-location 1 command on CGN1 and
CGN2 to view HA information. Vrrp state in the command output reflects the status of HA
backup group 1, which must be consistent with the CGN's VRRP status. Batch-backup state in
the command output indicates whether batch backup has been finished.
Use CGN1 as an example:
[CGN1]
display service-location 1
service-location
1
Backup scene type: inter-
box
Location slot ID: 1 engine ID:
0
Remote-backup interface:
GigabitEthernet1/1/1
Peer:
172.16.5.2
Vrrp ID:
1
Vrrp bind interface:
GigabitEthernet1/1/1
Vrrp state:
master
Bound service-instance-group number:
1
Batch-backup state: finished
Step 9
Configure VPN instances named vpna and vpnb.
NOTE
The configurations on CGN1 and CGN2 are the same. For configuration details, see
HUAWEI
NetEngine80E/40E Router Configuration Guide - VPN
.
Step 10
Create a NAT instance, enable the VPN NAT function, bind the NAT instance to a service
instance group and allowed VPN instance, and configure an address pool and traffic conversion
policy.
# Configure CGN1.
[CGN1]
nat instance nat id 1
[CGN1-nat-instance-nat]
vpn-nat enable
[CGN1-nat-instance-nat]
service-instance-group 1
[CGN1-nat-instance-nat]
nat allow-access inside vpn-instance vpna global vpn-
instance vpnb
[CGN1-nat-instance-nat]
nat address-group 1 group-id 1 10.2.1.1 mask 24 vpn-
instance vpnb
[CGN1-nat-instance-nat]
nat outbound any address-group 1
[CGN1-nat-instance-nat]
quit
HUAWEI NetEngine80E/40E Router
Configuration Guide - Reliability
12 CGN Backing Up HA Configuration
Issue 02 (2014-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1393