Sebastien Guay wrote: > My question is: will enabling proxy_arp on the active firewall and > disabling it on the inactive be enough to route the traffic through the > correct(active) firewall? You use heartbeat and fake for that - It will update the ARP tables with the new firewall MAC when failover occurs. David _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc