G+_Jason Perry Posted May 15, 2017 Share Posted May 15, 2017 Strange question, is it possible to set up a pair of firewalls so if I do something to mess one up when I am playing traffic switches to the other? Link to comment Share on other sites More sharing options...
G+_Ben Reese Posted May 15, 2017 Share Posted May 15, 2017 I believe you'd need either a double-NAT setup or 2 public IPs - one for each firewall. And you'd also need a double-WAN router on the internal side. That Edge Router-X that has been mentioned on the show should be able to fill the double-WAN need. Link to comment Share on other sites More sharing options...
G+_David Wiggins Posted May 15, 2017 Share Posted May 15, 2017 Some firewalls have a gateway monitor that can keep track of connectivity, then assert itself in outages. While pfSense (and others) have failover capability, I have yet to dive into it. From what I can figure, the hardest part is informing the clients of the change. I feel like it's a simple problem that has been long since solved (proxy perhaps?), But I can't seem to place it off the top of my head. All that said, I'm pretty sure this can be configured to happen automagically. Link to comment Share on other sites More sharing options...
G+_Travis Hershberger Posted May 16, 2017 Share Posted May 16, 2017 2 routers are done often in the corporate world. Duel NAT (both routers connected to their WAN ports serially) can cause issues at times. Standard stuff at the enterprise level, where they have a publicly accessible portion with the majority of the network behind a 2nd router. Link to comment Share on other sites More sharing options...
Recommended Posts