Set up of Firewall and VRRP on routers

[kchopra01]

Hi People,

I have a network situation wherein I have to configure VRRP in internet facing routers. 

What changes do I need to make on firewalls ? How would I configure this design ? Do i need switch on between firewall and routers or can i direct setup vrrp on firewalls?

Network setup is like this :-

Core switch --> Firewall--> Routers--> ISP.

[BPry]

@kchopra01,

Maybe I'm missing something, but why would you need to modify anything on the firewalls when you enable VRRP? I'm guessing that you're doing this so that either router could be utilized in a failover condition? You would simply need to setup the Static Route within the Virtual Router so that your untrust traffic is routing to the floating IP address that is assigned to the routers. 

**Edit**

More specifically your untrust route would need to utilize the floating Gateway IP that gets assigned to the virtual router. 

[kchopra01]

You are absolutely right ! I just wanted to confirm this thing..
Please correct me.if i am wrong .....one wire from firewall will go to L2 switch and then from switch to both VRRP routers ?
Is this a good design for my situation ? I mean I have to use L2 switch between firewall and routers ?