cancel
Showing results for 
Search instead for 
Did you mean: 

Active/passive setup

after1_
Contributor

Active/passive setup

I have 2 external interfaces with VIP setup , using /29 public ip address space.

Now for the 2 internal interfaces, is it necessary to setup VIP for internal? Do I need to give the internal interfaces public ip addresses?

Thanks
3 REPLIES 3
ruc_
Regular Contributor

Re: Active/passive setup

The internal VIP will have to be in the same subnet as the 2 internal interfaces.

zanyterp_
Respected Contributor

Re: Active/passive setup

Yes, if you want to use both IPs at the same time. It is up to you on if you want to provide external IPs to your internal interfaces, but it is not needed. The key is that the internal interface(s) have access to the LAN data, regardless of the IP scheme used on it (which is why many do use the internal LAN network IPs).

srigelsford_
Contributor

Re: Active/passive setup

Yes you will need to setup a VIP on the internal interface.

The IPs can be private IPs as they will connect only to your network.

Sam.

JNCIS-SSL JNCIS-FWV JNCIS-ER JNCIS-SEC