topic Set up of Firewall and VRRP on routers in General Topics

Set up of Firewall and VRRP on routers

kchopra01 — Tue, 17 Apr 2018 07:56:12 GMT

Hi People,

I have a network situation wherein I have to configure VRRP in internet facing routers.

What changes do I need to make on firewalls ? How would I configure this design ? Do i need switch on between firewall and routers or can i direct setup vrrp on firewalls?

Network setup is like this :-

Core switch --> Firewall--> Routers--> ISP.

Re: Set up of Firewall and VRRP on routers

BPry — Tue, 17 Apr 2018 18:56:50 GMT

@kchopra01,

Maybe I'm missing something, but why would you need to modify anything on the firewalls when you enable VRRP? I'm guessing that you're doing this so that either router could be utilized in a failover condition? You would simply need to setup the Static Route within the Virtual Router so that your untrust traffic is routing to the floating IP address that is assigned to the routers.

**Edit**

More specifically your untrust route would need to utilize the floating Gateway IP that gets assigned to the virtual router.

Re: Set up of Firewall and VRRP on routers

kchopra01 — Tue, 17 Apr 2018 19:15:48 GMT

You are absolutely right ! I just wanted to confirm this thing..
Please correct me.if i am wrong .....one wire from firewall will go to L2 switch and then from switch to both VRRP routers ?
Is this a good design for my situation ? I mean I have to use L2 switch between firewall and routers ?