Jeff Ross <jross@openvistas.net> wrote:
quoted text
> What can one then use for the IP addresses for the $ext_if of
> the firewalls?

For connection testing. With only one IP assigned to the CARP
interface. When it is in BACKUP state you do not have an address
on the network and as such you can't check connectivity from the
BACKUP host.

For me with 25 vlans on production firewalls this is vital. For a
home network where IPs cost extra I would not care.