VRRP on the WAN side

[christian.paesano]

I'd like to implement VRRP on the WAN side of my routers so I don't have to use Dynamic DNS for all my inbound port forwards. The goal is to make sure that my spam filter and DVR port forwards can stay pointed at the same public IP.

I know how to configure it, it's already done in my lab environment. My question is this: Are there any dangers or disadvantages to this?

[Philip D'Ath]

hsrp works really well.  You can create redundancy groups for HA as well where the state of active connections is mirrored.

Never tried it with vrrp.  Should work, just is likely to have less flexibility.

[David_Che]

Filter out VRRP group virtual-MAC address in each access port that belong to same vlan.