cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
212
Views
0
Helpful
1
Replies

Better Mouse Trap - system configuration of redundant VPN3030

george.banaszak
Level 1
Level 1

Does anyone have a better method for upgrading config changes on a redundant pair of VPN concentrators? Here's my process.

Procedures for upgrading configuration changes on redundant (backup) VPN3030 Concentrators

Strategy: All changes to the master concentrator are dynamic. In order to ensure the backup concentrators remain in sync perform the follow operations:

1. Save the configuration changes (the boot file is overlaid with the active configuration file).

2. Change the VRRP role of the primary concentrator to “backup”.

3. TFTP a copy of the master configuration file to the backup concentrator.

4. Reboot the backup concentrator ‘without saving the active configuration file’.

5. Change the VRRP role of the primary concentrator back to “master”.

Thanks for your help in advance,

George

1 Reply 1

rkallas
Level 1
Level 1

That's about it. The real down side is that you still need to manually edit the admin accounts in the GUI. The encription of these doesn't come through very well when doing the TFTP to the secondary box. You may want to write a script to run the primary config file through sed to do the interface changes first.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: