The VIP needs to be on the ingress interface to be triggered correctly. If you want both untrust interfaces to be able to use the VIP, you would need to create a loopback interface, bind both untrust interfaces to the loopback and create the VIP on the loopback.
↧