Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

State failover, is it worth to implement

I am using PIX 525 as VPN server. Is it worth to try to implement state failover? As I understood documentation ... tunnels will not survive failover. Did I get it ok or ...

thanks!

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: State failover, is it worth to implement

It depends on the PixOS that you are running. If you're running 6.3, it is not possible for tunnels to move when the primary pix fails.

However, if you upgrade to 7.x, the IPSEC tunnels are included in the failover as well. And, with the new 7.2 release, it is possible to failover within a second, which would reduce the chance of a vpn client tunnel to be dropped.

2 REPLIES
New Member

Re: State failover, is it worth to implement

It depends on the PixOS that you are running. If you're running 6.3, it is not possible for tunnels to move when the primary pix fails.

However, if you upgrade to 7.x, the IPSEC tunnels are included in the failover as well. And, with the new 7.2 release, it is possible to failover within a second, which would reduce the chance of a vpn client tunnel to be dropped.

New Member

Re: State failover, is it worth to implement

well I am on 7.0 right now and planning to move to 7.2. So it is worth of try, ok, thanks

157
Views
0
Helpful
2
Replies
CreatePlease to create content