vpn spa and failover problem

Unanswered Question
Jun 1st, 2008
User Badges:


We have two VPN SPA modules on cisco 7600 Routers, and we need PKI,RSA Signature feature for IPSec VPN connections, so we have to upgrade IOS Release 12.2(18)SXF to 12.2(33)SRA.

Because IOS Release 12.2(18)SXF doesn't support PKI feature, but this supported Stateful HSRP.

IOS Release 12.2(33)SRA supported PKI feature, and Stateless HSRP failover(Not Stateful HSRP)

We try and configure Stateful HSRP Failover with Preshared feature work on IOS Release 12.2(18)SXF without any problems.

But Stateless HSRP Failover didn't work with IOS Release 12.2(33)SRA !!?

Just worked when we power off a VPN SPA module.(standalone not two module stateless hsrp failover )

Thanks your advice,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
smahbub Fri, 06/06/2008 - 10:03
User Badges:
  • Silver, 250 points or more

Refer to the following url which provides more information about "IPSec VPN Services Module for the 6500 Switch and 7600 Router":


The following link will also be useful:



This Discussion