Messages

Doh... 🤦
Sure, I have had only the function of the firewall as such in mind. But of course it too needs to have internet access.

Thank you for the reminder.

Set IPv4 none on WAN, add that one IP as CARP VIP, repeat on second node, done.

There are downsides to this, but at least you have a nail and two hammers...

Can you please explain the downsides to this or point to some documentation?

I'm currently considering add HA, and changing the WAN-Side would involve quite some work. So I would like weigh these future downsides to the needed work.