Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

ipsec high availability HSRP with 2811

According the feature navigator hsrp with ipsec should also be supported with 2811, but with 12.4.7a (and also with 12.4.3d) Advanced ip services the show command for that feature are not available. sh redundancy , sh crypto isakmp sa [actice | passive], sh crypto ha.

What's the problem? Is it not supported on 2811?

Cisco Employee

Re: ipsec high availability HSRP with 2811

only if an image name contains a 'k9' it contains crypto.

Check if in your image name there is a k9 notation.

Did you try IOS feature navigator?


New Member

Re: ipsec high availability HSRP with 2811

It is a k9 image.

ZOC001015#sh ver

Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(3d), RELEASE SOFTWARE (fc3)

Technical Support:

Copyright (c) 1986-2006 by Cisco Systems, Inc.

Compiled Wed 19-Apr-06 09:18 by alnguyen

I tried already the feature navigator. Feature navigator says that this feature is available with 2811.

New Member

Re: ipsec high availability HSRP with 2811

i ve got exactly the same problem and i still don't know how to resolve it. Any clues about it?

Re: ipsec high availability HSRP with 2811


Cisco have unfortunately named two separate features almost identically. The two features are as follows:

IPSec VPN High Availability Enhancements


IOS IPsec High Availability (or Stateful Failover for IPSec)

The first feature increases availability by using HSRP and RRI, and the second does much the same except that the SA's are communicated between the routers over an IPC channel, which gives you stateful failover. The first feature is available across a wide selection of routers and feature sets but the second is only available on a select number of routers (3700,3800,7200,etc).

Basically, if you want IPsec stateful failover you need to get some 3700's or above.

HTH - plz rate if it does


New Member

Re: ipsec high availability HSRP with 2811

Thank you very much for your answer. I was looking for this information since so long...

CreatePlease to create content