Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Better Mouse Trap - system configuration of redundant VPN3030

Does anyone have a better method for upgrading config changes on a redundant pair of VPN concentrators? Here's my process.

Procedures for upgrading configuration changes on redundant (backup) VPN3030 Concentrators

Strategy: All changes to the master concentrator are dynamic. In order to ensure the backup concentrators remain in sync perform the follow operations:

1. Save the configuration changes (the boot file is overlaid with the active configuration file).

2. Change the VRRP role of the primary concentrator to “backup”.

3. TFTP a copy of the master configuration file to the backup concentrator.

4. Reboot the backup concentrator ‘without saving the active configuration file’.

5. Change the VRRP role of the primary concentrator back to “master”.

Thanks for your help in advance,

George

1 REPLY
New Member

Re: Better Mouse Trap - system configuration of redundant VPN303

That's about it. The real down side is that you still need to manually edit the admin accounts in the GUI. The encription of these doesn't come through very well when doing the TFTP to the secondary box. You may want to write a script to run the primary config file through sed to do the interface changes first.

88
Views
0
Helpful
1
Replies