11.2. VRRP for Advanced High Availability
This section explores using VRRP to provide redundancy for some critical applications. It can then be used as a blueprint for providing redundancy for other proprietary applications. First, we look at using VRRP to provide redundancy for mobile IP and firewall by synchronizing state tables and other proprietary information related to these applications between a master and a set of backups running VRRP.
11.2.1. VRRP and Firewall Synchronization
Chapter 6 looked at how stateless firewalls are able to leverage VRRP's failover mechanism. However, stateful firewalls are unable to do this. Stateful firewalls normally retain a state information per session going through them. For example, a TCP session would ...