On Tue, 13 Jan 2004, Drag0n wrote: > I have a situation that i need to have firewall fail over capability. 2 > separate systems with identical rules with 3 interfaces, (internet, DMZ, > and LAN) This document may help: http://www.freeswan.ca/docs/HA/HA_VPNS_With_FreeSWAN.html -- Andy Loukes http://www.navaho.co.uk Complete Appliance Technology