# Deploy HA pair with two separate gateway

**URL:** <https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139>\
**Category:** System\
**Created:** [February 10, 2012, 6:08am UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139 "2012-02-10T06:08:33Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jindok42](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@jindok42](https://community.a10networks.com/u/jindok42)\
**Post date:** [February 10, 2012, 6:08am UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/1 "2012-02-10T06:08:33Z")

</div>

I have a HA pair AX, I want to load balance for Farm servers and DMZ servers (one AX primary for Farm, standby for DMZ, the other one primary for DMZ and standby for Farm). The problem is, there’s two different gateway for server in Farm and server in DMZ in this case, no VRRP in gateway router because they work independently. Please advice me how to overcome this issue?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)\
**Post date:** [February 14, 2012, 1:22pm UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/2 "2012-02-14T13:22:31Z")

</div>

A couple questions.

1. What version of code is running on the AX?
2. Are you using separate VLANs to segment the traffic?

---

<div class="post-metadata">

**Author:** ![jindok42](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@jindok42](https://community.a10networks.com/u/jindok42)\
**Post date:** [February 20, 2012, 3:09am UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/3 "2012-02-20T03:09:50Z")

</div>

I am using version 2.4.x and separate VLANs to segment the traffic

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)\
**Post date:** [February 20, 2012, 5:01pm UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/4 "2012-02-20T17:01:41Z")

</div>

The best way to accomplish this is to use a default route for the DMZ return traffic and static routes for the remainder of the traffic.

Example

```auto
ip route 0.0.0.0 /0 10.1.1.254 (for DMZ)
ip route 10.0.0.0 /8 10.0.0.254 (for Internal traffic)

```

You may have to alter the second route to fit the networks you’re trying to route to, but this should work for your deployment. There are other options that require a code upgrade to 2.6.1p4, but this should be your first option.

---

<div class="post-metadata">

**Author:** ![jindok42](https://avatars.discourse-cdn.com/v4/letter/j/dec6dc/32.png) [@jindok42](https://community.a10networks.com/u/jindok42)\
**Post date:** [February 21, 2012, 6:53am UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/5 "2012-02-21T06:53:15Z")

</div>

There’re too many of subnets for DMZ and Internal and it is too complicate. I upgraded to 2.6.1 -p4 to create two partition in this case, this is good option for me. Thanks jraasch

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex002/uploads/a10_community/original/1X/bb9f186d33804d3044a0374e589f49fdf3be1328.png) [@system](https://community.a10networks.com/u/system)\
**Post date:** [February 21, 2012, 2:41pm UTC](https://community.a10networks.com/t/deploy-ha-pair-with-two-separate-gateway/139/6 "2012-02-21T14:41:23Z")

</div>

Great to hear that application delivery partitions worked for you as that is the best and cleanest option.