Active/passive setup

[after1_]

I have 2 external interfaces with VIP setup , using /29 public ip address space.

Now for the 2 internal interfaces, is it necessary to setup VIP for internal? Do I need to give the internal interfaces public ip addresses?

Thanks

[ruc_]

The internal VIP will have to be in the same subnet as the 2 internal interfaces.

[zanyterp_]

Yes, if you want to use both IPs at the same time. It is up to you on if you want to provide external IPs to your internal interfaces, but it is not needed. The key is that the internal interface(s) have access to the LAN data, regardless of the IP scheme used on it (which is why many do use the internal LAN network IPs).

[srigelsford_]

Yes you will need to setup a VIP on the internal interface.

The IPs can be private IPs as they will connect only to your network.

Sam.

JNCIS-SSL JNCIS-FWV JNCIS-ER JNCIS-SEC