HA Active/Active,..

[Gururaj]

Hi Team,..

Attached is the scenario for HA Active/Active,..Is it possible to configure IPSec and SSL VPN in this Scenario?

The  external interfaces of each PA firewall is directly connected to ISP  routers and have configured defferent public IP's on both. And we

require single Gateway for all internal host..

[UhMayYeah]

Here is a handy Tech-Note explaining the IPSEC with HA Active-Active.

Floating IP can be used a shared Gateway for the internal Network.

Hope this Helps.

[Gururaj]

Hi Ameya,..

Thank you for reply. In this document, we are using IP addresses for both floating IP's & Interface IP's for both ISP's from the same subnet. But in our scenario (Attached Topology) we have two different ISP's which have different IP's with different subnets. How to deal with this scenario?. Did we need to make some modification in our scenario (Including ISP Routers ) ?

Thank you,.

Gururaj