Firewall Back-up

[gvilla @ minerva1 . bull . it (Guido Villa)]

In order to get high-availability target this config should be set-up:


OUT NET
----------------------------------------------------------------------
            |                       | 
            | .1                    | .2
        ---------               ---------
        |       |               |       |
        |       |               |       |
        |master |               |backup |
        ---------               ---------
            |                       |
IN NET      |                       |
----------------------------------------------------------------------

"master" could crash or physical (tcp-ip down) or logical (telnet down).
                     --                        --
  
"backup" should be able to start automatically.

Thinking about DNS reconfiguration to be activated as "backup" detects 
"master"'s failures (physical/logical), which kind of solution is known?

I'm thinking for automatic updating of file "named" (ip-address .1 changed
with .2).

Any experiences with rerouting thru ROUTER?

Guido Villa
Bull HN Italia
g .
 villa @
 it12 .
 bull .
 it