How to deploy two Firewalls for HA

This document describes to how to deploy two firewalls for HA.

One Bumblebee CPE devices can connect directly to two firewalls for HA, as shown below.

Firewall HA Deployment

In this scenario, the Bumblebee CPE is configured as Pass Through Mode.

In Pass Through Mode, the Bumblebee CPE functions as an Ethernet switch. Its ETH1 and ETH2 ports are both on the same LAN segment. The two firewalls share one virtual (VRRP) IP address of the LAN segment. The LAN segment subnet is usually a /29 DMZ subnet assigned by the service provider.