Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPSec Stateful failover (aka IPC sso)

I am trying to setup IPSec Stateful

failover on a pair of VXR7204 router

running version 12.3T. I was told by

Cisco some months ago that unless IPSec

stateful will not be supported by Cisco

unless I have AIM or VAM card on the

router. This is what currently on the

VXR 7204:

VXR7204#sh crypto engine configuration

crypto engine name: Multi-VPN Using VAM2

crypto engine type: hardware

Compression: Yes

DES: Yes

3 DES: Yes

AES CBC: Yes (128,192,256)

AES CNTR: No

Maximum buffer length: 4096

Maximum DH index: 5120

Maximum SA index: 5120

Maximum Flow index: 10230

Maximum RSA key size: 2048

Minimum RSA key size: 0512

crypto engine in slot: 2

platform: VPN hardware accelerator

Crypto Adjacency Counts:

Lock Count: 204555176

Unlock Count: 204555176

crypto lib version: 18.0.0

ipsec lib version: 2.0.0

PLNDCAARV0N#

Can anyone confirm that IPSec stateful

failover (aka IPC sso) will work with

VAM2 card. Thanks.

1 REPLY
Silver

Re: IPSec Stateful failover (aka IPC sso)

Yes it is supported. It is supprted on VAM, VMA2, VAM2+.

169
Views
0
Helpful
1
Replies