Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

1710 VPN Tunnel Failover

Can anyone confirm whether the 1710 can automatically failover and establish a VPN tunnel to another VPN endpoint at a different location if it detects its VPN Tunnel cannot be established to its headend device. The scenario is a 1710 to a 3000 series concentrator.

The 3002 devices provide this functionality and I was hoping the same was true for the 1700 VPN series.

1 REPLY
New Member

Re: 1710 VPN Tunnel Failover

Yes, I think you can do it on a 1710 as well.

I assume that your primary is 30.30.30.30, backup is 40.40.40.40

crypto isakmp policy 20

encr 3des

authentication pre-share

group 2

crypto isakmp key sharedkey address 30.30.30.30

crypto isakmp key sharedkey address 40.40.40.40

crypto isakmp keepalive 10 20

! to keepalive when primiry site down and build up tunnel with backup site

!

crypto ipsec transform-set dsltest esp-3des esp-md5-hmac

!

crypto map test 10 ipsec-isakmp

set peer 30.30.30.30

set peer 40.40.40.40

set transform-set dsltest

match address 101

Best Regards,

88
Views
0
Helpful
1
Replies