[cmarcusson]

Is it possible to run VRRP with only 1 public IP. There seems to be little or no documentation covering this implemenatation. I beleive that the reason for that is because in order to publish a how-to on VRRP with 1 IP, you need to include switch configuration, and that exceeds the scope of the simplified VRRP setup docs. My colleges are convinced that it cannot be done due to the lack of documentation, but I still think it can.

You should just be able to address your Virtual Router with your Public IP, and then address the 2 physical external interfaces with anything like 1.1.1.1 or something. The Checkpoint Gateway Cluster Object should then be able to push the policy to all memebers on those private external interfaces??? Switch configuration would be another story, but should be possible right?

Can someone clarify this for me (any available diagrams would be greatly appreciated too.)

Thanks in advance for any advice,

Chad

Nokia 560's x 2 w/ NGX R65