Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN3k Load-Balancing and IOS IPSEC Stateful Failover

Hi Experts.

As I need to design a highly-resilient Cisco-based hub-and-spoke IPSec VPN with several sites, I'm wondering what's the difference between the following two mechanisms:

- VPN 3k Load-balancing

- IOS IPSEC Stateful Failover

As far as I understand, VPN 3k Load-balancing implements an active-active configuration but is not transparent to the remote IPSec termination, so it supports only the Cisco VPN3002 and the Cisco VPN Client on the other side.

On the other hand, the IOS IPSec Stateful Failover implements an active-standby configuration but seems to be more transparent to the remote IPSec termination and can support every equipment to the other side.

Am I correct?

Your comments are welcome.

Thank you

michele

1 REPLY
New Member

Re: VPN3k Load-Balancing and IOS IPSEC Stateful Failover

Hi Michele,

What you said is right. When you are doing IOS IPSEC stateful failover, the remote site has no idea you are doing failover and it can support more equipment.

Anyway, you are correct about VPN 3K and IOS IPSEC.

Thanks

Tony

87
Views
0
Helpful
1
Replies
CreatePlease login to create content