Everything works in my environment ( Vlan routin, failover , etc) and now I want to make sure that my core switches default Gtwy has 2 ip route statements one gtwy for my dmz vlans on 172.27.0.0 (172.27.0.254 Netscreen int) and one for my 10.170.0.0 (10.170.0.254 Trust Netscreen) . When I do a tracert from one device (pc) on 172.27.22.1 it goes out to the internet thru the trusted interface on the FW 10.170.0254.
Sample output.
interface Vlan11
description Trust VLAN
ip address 10.170.0.2 255.255.128.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 11 ip 10.170.0.1
standby 11 priority 255
standby 11 preempt
standby 11 authentication xxxxxxxx
standby 11 track Vlan11
!
interface Vlan12
description 'heartbeat' network
ip address 10.170.128.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 12 ip 10.170.128.1
standby 12 priority 255
standby 12 preempt
standby 12 authentication 3ll1m@3
standby 12 track Vlan12
!
interface Vlan13
description vmkernel network
ip address 10.170.160.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 13 ip 10.170.160.1
standby 13 priority 255
standby 13 preempt
standby 13 authentication xxxxxxxxx
standby 13 track Vlan13
!
interface Vlan14
description OOB mgmt/admin network
ip address 10.170.192.2 255.255.192.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 14 ip 10.170.192.1
standby 14 priority 255
standby 14 preempt
standby 14 authentication xxxxxxxx
standby 14 track Vlan14
!
interface Vlan15
description DMZ LAN
ip address 172.27.0.2 255.255.128.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 15 ip 172.27.0.1
standby 15 priority 255
standby 15 preempt
standby 15 authentication 3ll1m@3
standby 15 track Vlan15
!
interface Vlan16
description future use
ip address 172.27.128.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 16 ip 172.27.128.1
standby 16 priority 255
standby 16 preempt
standby 16 authentication xxxxx
standby 16 track Vlan16
!
interface Vlan17
description future use
ip address 172.27.160.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 17 ip 172.27.160.1
standby 17 priority 255
standby 17 preempt
standby 17 authentication 3ll1m@3
standby 17 track Vlan17
!
interface Vlan18
description future use
ip address 172.27.192.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 18 ip 172.27.192.1
standby 18 priority 255
standby 18 preempt
standby 18 authentication xxxxx
standby 18 track Vlan18
!
interface Vlan19
description load balanced IP's
ip address 172.27.224.2 255.255.224.0
no ip redirects
no ip unreachables
no ip mroute-cache
standby 19 ip 172.27.224.1
standby 19 priority 255
standby 19 preempt
standby 19 authentication xxxxx
standby 19 track Vlan19
!
ip route 0.0.0.0 0.0.0.0 10.170.0.254
ip route 172.27.0.0 255.255.0.0 172.27.0.254