OPNsense Behind an ISP Router

[spetrillo]

Hello all,

I am building an OPNsense two node cluster. Each node will be connected to my ISP router. The internal network of the ISP router is 172.16.2.0/24. I have setup the nodes to have hard IPs of 172.16.2.3 and 172.16.2.4, with the VIP being 172.16.2.2. The gateway is 172.16.2.1. Is this a doable config or am I better off connecting the WAN side connections to a switch, and then a third switch connection up to the router?

Thanks,
Steve

[Patrick M. Hausen]

If the ISP router has multiple internal ports, there is most probably a switch built in, so why introduce another single point of failure?