Nokia Network Voyager for IPSO 4.0 Reference Guide 1973. In the row for the interface you want to configure, select the VRRPv2 radio button in theMode column.4. Click Submit.Text boxes for Own VRID and Backup Router with VRID appear.5. Configure the router as a master or a backup by doing one of the following. If you want to configure this router as the master for a VRRP group, enter the VRID forthe virtual router in the Own VRID text box. If you want to configure this router as a backup, enter the VRID you want the router toback up in the Backup Router with VRID text box.6. Click Apply.Additional fields appear.7. Do one of the following, depending on whether this platform serves as a master or a backup. If this platform serves as the master router, enter values in the Own VRID section forhello interval and VMAC mode for the VRID for which this platform serves as themaster router. (For VRRPv2, the priority for the master is automatically set to 255 andthe backup address is the physical address of the interface.) If this platform serves as a backup router, enter values in the Router with VRID sectionfor each VRID you are using the interface to backup.8. Click Apply.9. Click Save to make your changes permanent.NoteTo disable a virtual router, first remove the VRRP configuration for that virtual router from allbackup routers. If you delete the virtual router on the master first, it stops sending VRRPadvertisements and the backup router assumes it has failed and adopts the address of themaster automatically. This results in two routers having the address of the default routerconfigured.Configuring Check Point NGX for VRRPThe guidelines in this section list some considerations for configuring Check Point NGX forVRRP. For additional details, refer to the Check Point documentation. Each VRRP node must run the same feature pack and hot fix. You must install the same Check Point packages on each node; each VRRP node must haveexactly the same set of packages as all the other nodes. Create the complete VRRP configuration before you put any of the systems into service.That is, make sure each system is completely configured and the firewall has begunsynchronization before putting the VRRP group in service. Following this process ensuresthat all connections are properly synchronized.
