topic server gateway address in Network Security

server gateway address

770801tvdhaar — Mon, 11 Mar 2019 14:48:18 GMT

FWSM in multi context mode and routed mode.

I'm coming from checkpoint world and there we have VRRP gateways we handout to clients/servers. Going through a config guide for FWSM I see the following.

My quiestion is which address will be handed out to the clients/servers

interface vlan 201

nameif inside

security-level 100

ip address 10.0.3.1 255.255.255.0 standby 10.0.3.2

Re: server gateway address

Jon Marshall — Tue, 10 Feb 2009 15:27:20 GMT

It would be the address assigned to the primary firewall - in your example from above 10.0.3.1. If the primary firewall fails over to the standby the address moves to the standby as well.

Jon

Re: server gateway address

Tyrone Van Der Haar — Tue, 10 Feb 2009 18:29:29 GMT

Thanx!

Re: server gateway address

Tyrone Van Der Haar — Wed, 11 Feb 2009 08:16:50 GMT

one last question, I suppose if I'm setting up a static route I point it to the active firewall and if that goes down the adddress is moved to the standby?

Just have to make sure:-)

Re: server gateway address

Jon Marshall — Wed, 11 Feb 2009 10:24:51 GMT

Just have to make sure:-) - nothing wrong with that 🙂

Yes, you would use the primary firewall IP address as the next-hop in your static route.

Jon