Hi All

I am after some guidance or a push in the right direction

The company i work for is moving away from managed internet.
We are embarking on the unmananged path.

What we have is two WAN links a main and a backup.
We have acquired two CCR2116-12g-4s+

Is the below a viable HA solution

Currently my plan is like this

Two Modems - M1(main) + M2(backup)
Two Switches S1 + S2
two CCR R1 + R2
FW Cluster

M1 linked to S1 + M2 linked to S2
S1+S2 linked to R1(VRRP + ?)
S1+S2 linked to R2(VRRP + ?)
R1 + R2 linked to FW cluster with floating VRRP Gateway

Would this work?

I'm sure it can work. But I'm of the opinion that VRRP is MORE useful on the LAN side. So clients get a stable gateway to the cluster. Splitting the WANs as shown works fine with the "VRRP'd LANs" approach (e.g. if one router has to reboot/upgrade/etc, it's a minor disruption to clients (e.g. existing tracked connections will drop, but will be re-established quickly — with users need to hit "reload" browser the only typical visibility of failover). The "LAN only" approach is simple, outside the slight distribution due to changing upstream WAN connection tracking.

VRRP on the WAN side gets tricker. VRRP has "connection tracking" which can be used to make seamless. But what's services/speed/etc your ISP is (or can) provide on the modems is CENTRAL question. Like they may offer BGP, or ISP may offer bonded/etc connections for HA, etc. But to use "VRRP on WANs", you'd ideally want to bridge the modems between the two routers and the modem (and another bridge 2nd WAN) — but whether that's possible depends on what ISP is providing for IP subnets.

Thank you for the confirmation

I was going to Do VRRP on the LAN Side.
I put mislabled my basic diagram.
thanks again