I would like to fail over my public ip addresses between firewalls if one fails. Clustering currently support VPN but if it moves the ip addresses in the group is that all that is needed. Or should I use VRRP? The problem I see with VRRP is that the messages are sent on the public interface so my VRRP info would be exposed. Any guidance would be appreciated. Thank you.
Tim
As usual, it depends :-)
If you just to move the connection to a single virtual interface on
multiple systems,
VRRP is fine. If you need to move between duplicate systems and shift all
interfaces and VPN, you'll want to set up clustering.
Best,
Justin
On Thu, Mar 13, 2008 at 8:36 AM, Tim_WI wrote:
Thanks I will try clustering.