andrewluck, Were you ever able to successfully implement this? I needed a similar setup for implementing plain failover routing (not vpn) and I have done it using the following strategy: - I have no scripts on the master router: [admin@master] > /interface vrrp print detail Flags: X - disabled, I - ...