[Shorewall-users] High Availability firewall

[Baldur N. <bbn...@cl...>]

Hi,

I want to setup a high availability firewall using two identical 
servers. If there is some information on how this has been done before, 
I would welcome any pointers.

My own idea involves using HeartBeat to switch the active IP address 
between the two firewalls. This will effectively create a 
"active/passive" system, where the passive firewall is simply a hot 
standby in case the primary fails.

Any thoughts?

Thanks,

Baldur