cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
307
Views
0
Helpful
2
Replies

IPsec stateful failover - already there ???

http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/iosec_ds.htm states that stateful failover of IPsec will be there in Q402. We're almost at the end of 2002 and i have not found any signs of the availability of the feature. Is there any hope to have it soon, is it there but hiding somewhere or are there any new dates for the availability ?

2 Replies 2

wdrootz
Level 4
Level 4

There are features currently available that allow for IPSEC stateful failover:

http://www.cisco.com/warp/public/cc/general/bulletin/software/ios122/1992_pp.htm

Here is another link that documents the IPSEC VPN High Availbility features:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121limit/121e/121e9/ipsecha.htm

gmiiller
Level 1
Level 1

If you have a look at 12.2(13)T you will find some enhancements for GRE multipoint with crypto. Many sites requiring the equivalent of "stateful failover" or better yet, load balancing across multiple encrypters have been using GRE multipoint for some time. The advances in 12.2(13)t eliminate some of the mess from using crypto on GRE tunnels, meaning that now you can do fully-meshed router to router crypto and at the same time also do VPN RAS.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: