Convert standalone firewall to HA

[GBDickinson]

Hi all,

I have an existing firewall that currently works, NATting both inbound and outbound on secondary IP addresses.  The default gateway for the LAN is the real LAN IP.

I'd like to make this box part of an HA pair.  I can get the IPs set up as CARP IPs (making the "real" LAN/WAN IPs a different IP) but what's the best way to get the NAT and Firewall rules in place on the backup firewall?  Would I simply set up CARP and then "edit" each rule to turn on XML sync?

[jimp]

Yep, get them talking on the sync port, setup config sync and the firewall/nat rules will copy over.