static wan VRRP

XYLITOL

Hello.

I have a vrrp redundant configuration with watchguard. Is it possible to have each watchguard configured with a different IP address?
Is it ok to use the same global IP address for static WAN?

james.carson

Hi @XYLITOL

The only instance where the firebox indirectly supports VRRP is via FireCluster. See:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/ha/cluster_about_wsm.html

If it's a standalone device, the firebox will send traffic to whatever the default gateway is. You can set up secondary WAN addresses in the Secondary tab for each interface if you'd like to use multiple WAN addresses on one interface.

XYLITOL

Can I configure PPPoE on a secondary wan address?

XYLITOL

Is firecluster synchronized between watchguard? It appears to be working without a virtual IP address set up. watchguard redundancy, I am also considering WAN redundancy (two separate WANs)

james.carson

Hi @XYLITOL

You can configure a secondary IP for PPPoE if your ISP supports doing so.

If you are looking for redundancy, I'd suggest using seperate interfaces, so if one of your ISP devices goes down, you don't lose both external IPs.

I'm not sure exactly what you want to synchronize. The cluster members sync between each other. I'd suggest reading thru the Firecluster Overview:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/ha/cluster_about_wsm.html