We need to change bastion02's external IP address. Since we never got redundant services back up, I'm going to get bastion01 in place and taking all the production traffic, then we can move bastion02 as we need to.