Hey guys,

I have two 6503's with Sup720's and FWSM's in and want to create a VPN tunnel from their poistion to our office here. I have a dedicated router here but would like to know where you suggest I terminate the tunnel at the 6503 end?

From what I've read it looks as though I can't do it on the FWSM's, which was going to be my place of choice! Is this definitely the case?

If I do it on the MSFC how will it work if one switch goes down? Do I need to create a HSRP address and set the tunnel up using that to solve any failover issues or is there a better way?

Thanks in advance

Anthony