referring to the diagram below, we have 2 VLAN's for voice, primary route for VLAN1 (red) is the left side, and VLAN2 (green) is the right.
As it stands we have a nice easy setup, where VRRP kicks in during a failure (top diagram).
But we are looking to put security and flexibility by means of a firewall and switch in line (bottom diagram).
However, this would stop the VRRP mechanism at the FW. So under a failure condition, it wouldn't necessarily use the alternate network route.
SIP Options would kick in at this point and detour to the other route, but I would like the network to re-converge and use the alternate route available before relying on SIP options (after all we're paying for it), but as long as the firewall is up, any network issues are masked in either direction.
The gateway is a dual presentation, single active NIC.
What are my options to best utilise the network failover mechanism in the setup? Is there a way of propagating VRRP (through object tracking) to the GW from the SP switch, or would I need to think of different ways completely?
FW is a PA220