Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

site-to-site VPN tunnels on HSRP VIP

I want to set up an HA IPSec VPN and terminate the Tunnels on the VIP of the HSRP group.

Does anyone have a similar design and what kind of fail-over times can I expect?

the fact that a router will reboot if a fail-over occurs is somewhat troubling although I assume that it is a nessiary evil to facilitate the tear-down of the tunnels.

any thoughts or explainations.

1 REPLY
Silver

Re: site-to-site VPN tunnels on HSRP VIP

Yes it is possible jus use crypto map redundancy . The failover time is as fast as the failover time of HSRP which is by default 10 secs. However if on the LAN side, you are using HSRP then it is fine. If it is Routing Protocol u can tweak the timers

142
Views
0
Helpful
1
Replies
CreatePlease login to create content