You use a VIP for the firewall cluster, and the VIP is the default route for the protected subnet.. eg: if you have 2 FW's, LAN VIP is .1 say.. Firewalls have "real" IP's of perhaps .10 & .11 but the default gateway is .1 for the LAN. WAN side is the same thing. There are big installs where you have multiple VIP's, and you can use that for some basic load allocation etc. You could also have varying cost routes to the different RW clusters, or use OSPF / IS-IS or iBGP internally to deal with topology changes but that's just routing stuff.
hth Joe >>> J�rg Oertel <[EMAIL PROTECTED]> 01/31/02 08:31AM >>> You Rainwall guys out there can propably answer my question. How do you implement the routing from your protected LAN to the world? I mean, usually you have a default gateway configured at each workstation/PC. But in a Rainwall HA configuration you've got a bunch of IP addresses for the firewalls. How does it work? Any comments, at which technical or abstract level ever, are welcome. Kind regards/Mit freundlichen Gr��en J�rg Oertel -- Joerg Oertel Tel:02225/8820 MOSAIC SOFTWARE AG Fax:02225/882201 Feldstra�e 8 e-mail:[EMAIL PROTECTED] 53340 Meckenheim www.mosaic-ag.com ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
