hrp base config enable

By default, this function is disabled, and the FW starts with configurations in the configuration file.

Only the USG6510E/6510E-POE/6530E does not support this command.

Application Scenarios

In hot standby deployment, if one FW restarts, the other FW takes over all services during the restart. In this period, the service processing FW may have configurations added, deleted, or modified. If you require the FW automatically synchronize configurations from the service processing FW after its restart, run the hrp base config enable command so that the FW starts only with basic hot standby configurations and synchronizes other service configurations from the service processing FW.

Configuration Impact

After the hrp base config enable command is executed, the FW starts with basic configurations. These configurations enable the active and standby FWs to properly communicate through heartbeat links. After the FW starts with basic configurations, it synchronizes other configurations. Later, the FW operates and processes services with synchronized configurations.

Only configurations that can be backed up, such as security policies and NAT policies can be automatically synchronized between the active and standby FWs. Configurations that cannot be backed up remain as earlier and are used as basic configurations for the initial startup.

Basic configurations include hot standby related configurations (such as hrp enable, hrp mirror config enable, and hrp interface), IP address configurations of the heartbeat interface and management interface, and configurations of adding the heartbeat interface and management interface to the security zone.

Precautions

This function is supported only in the mirroring mode and is not supported in a non-mirroring mode.

Configurations that cannot be backed up in mirroring mode are different from those in non-mirroring mode. This is also the case for items covered in basic configurations. Details are as follows;

The function takes effect only after you run the hrp base config enable command on both the active and standby FWs. The function does not take effect if you run the command only on one FW.

Configurations synchronized by the FW from the peer device are not automatically saved to the configuration file. After the synchronization completes, run the save command to save the configurations.