1710 VPN Tunnel Failover

[dbaron]

Can anyone confirm whether the 1710 can automatically failover and establish a VPN tunnel to another VPN endpoint at a different location if it detects its VPN Tunnel cannot be established to its headend device. The scenario is a 1710 to a 3000 series concentrator.

The 3002 devices provide this functionality and I was hoping the same was true for the 1700 VPN series.

[paqiu]

Yes, I think you can do it on a 1710 as well.

I assume that your primary is 30.30.30.30, backup is 40.40.40.40

crypto isakmp policy 20

encr 3des

authentication pre-share

group 2

crypto isakmp key sharedkey address 30.30.30.30

crypto isakmp key sharedkey address 40.40.40.40

crypto isakmp keepalive 10 20

! to keepalive when primiry site down and build up tunnel with backup site

!

crypto ipsec transform-set dsltest esp-3des esp-md5-hmac

!

crypto map test 10 ipsec-isakmp

set peer 30.30.30.30

set peer 40.40.40.40

set transform-set dsltest

match address 101

Best Regards,