Firewall Redundancy CARP Similar in some ways to VRRP Multicast Advertisement Address moved by moving a virtual MAC address Multiple virtual addresses on same network Variable advertisement interval most frequent advertiser becomes master Advertisement protected by a SHA1 HMAC Addresses not in Advertisement, but in HMAC Supports layer 2 load balancing (ARP based) IPv4 and IPv6 support