Don,

Couldn't you define a secondary IP address and put in a route statement to
the firewall through that interface?

Also have it defined on your backup NetView, and at failover, have a small
script to "start" that secondary interface and route to the firewall
through it.   This way the firewall would be seeing traffic from the "same"
interface from both NetViews?   When primary comes back up the backup takes
the secondary interface back down?

Kind regards,
Stephen Hochstetler              shochste AT us.ibm DOT com
International Technical Support Organization  - Austin
Office - 512-436-8564                      FAX - 512-436-8701

ITSO redbooks at  http://www.redbooks.ibm.com