3 0 Registered LAN_WAN_5x10GF_B_CARD 5 SUCCESS
SUCCESS
3 2 Registered ETH_24xGF_B_CARD 24 SUCCESS
SUCCESS
3.
Run the
display firewall cpu-table
command on the standby FW to view the card table.
Compare the card table after expansion with that before capacity expansion to confirm
whether the card table is updated. If the card tables before and after capacity expansion
are different, the card table has been updated successfully.
HRP_S<sysname>
system-view
HRP_S[sysname]
diagnose
HRP_S[sysname-diagnose]
display firewall cpu-table
The FW allocates sessions to various CPUs for processing based on the card table. After
the card table of the standby FW is updated, the standby FW sends the updated card table
to the active FW. After receiving the new card table from the standby FW, the active FW
synchronizes session tables to the standby FW. During session backup, the active FW
allocates sessions to CPUs for processing based on the card table of the standby FW. In
this way, the standby FW can properly identify and process sessions after they are
backed up to the standby FW.
Registering the SPU and updating the card table on the standby FW FW takes around 20
minutes.
Session backup between the active and standby FWs takes around 2 minutes. Therefore,
after confirming that the card table is updated, wait 2 minutes before performing
subsequent operations.
Step 7
Run the
hrp track spu enable
command on the standby FW to enable the VGMP group to
monitor the SPU.
HRP_S<sysname>
system-view
HRP_S[sysname]
hrp track spu enable
After the VGMP group is enabled to monitor the SPU, the VGMP group priority of the
standby FW becomes higher than that of the active FW, triggering active/standby switchover.
The standby FW assumes the active role and processes service traffic, and the active FW
enters the standby mode.
Service switchover takes a moment. To ensure service continuity, run the
hrp track spu
enable
command and wait one minute before performing subsequent operations.
Step 8
Optional:
If two FWs work in load balancing mode, perform
mode to the active/standby mode. After
is complete, run the
undo hrp switch active
command on the FW on which the
hrp switch active
command is executed (namely, the FW
in standby status) to cancel the operations from step
.
If two FWs work in active/standby mode, and operations in
this step.
HRP_S<sysname>
system-view
HRP_S[sysname]
undo hrp switch active
Step 9
on the original active (now standby) FW to expand its SPU capacity.
Step 10
Check whether the service is working properly.
----End
HUAWEI USG9500 Series
Hardware Guide
3 Hardware Maintenance
Issue 03 (2017-12-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
368