Each externally exposed address must be mapped to an internal VRRP of the cluster. You can either directly expose the VRRP IP addresses for the three service sets directly through a firewall, or in the case of NAT translation, ensure that the externally available IP addresses are mapped 1:1 to the internal services, and that the correponding application ports are allowed for access (per firewall rules definition).
Important
Before you begin step-by-step configuration, make sure that you clearly understand and document all the elements of the network presence and topology related to the deployment.The Inter-Cluster Connection (ICC) IP address is critical to the continuous operation of the system. If address definitions for ICC require re-addressing, the entire cluster will need to be rebuilt and the application re-deployed in order to re-establish all the correct references of services within the cluster.
It is strongly recommended that the entire IP address structure for all services be defined once and not changed. Re-addressing can expose internal dependencies on references to mapped services and therefore affect the integrity and stability of the deployed installation.