Hi rakeshb you see I have to define a default gateway on the SA for the traffic to go out and because I have a pair of J series acting as the exit point for the SA, I have to have a single IP( VRRP Virtual IP). OR my question: Should I define multiple default gateways with different metrics or preference. The VRRP virtual IP should work fine as I am forcing one of the J series to be master and other one is not preempting. But for some reason it is slowing down the connection to an unacceptable limit. I will take your suggestion and post this in the routing section. Thanks for your help, Rgds Mazhar
... View more