Solved: IPSEC Stateful Failover using two 4507RE switches

nicholas boran · ‎07-03-2013

Hello

I have been trying to find the configuration guides for a cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG, with entservices license.

We have an immediate requirement to build a HA IPSEC VPN from two 4507RE switches, while we wait for new ASA's to be provisioned. I don't think we can do it, in HA setup.

Advice is very welcome.

Thanks

Nick

Marcin Latosiewicz · ‎07-03-2013

Nick,

IPsec is not supported at all on cat4500 platform.

We're working on removing IKE/IPsec commands from new parser in IOS XE:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuh60386

M.

(Editted typos)

nicholas boran wrote:

Hello

I have been trying to find the configuration guides for a cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG, with entservices license.

We have an immediate requirement to build a HA IPSEC VPN from two 4507RE switches, while we wait for new ASA's to be provisioned. I don't think we can do it, in HA setup.

Advice is very welcome.

Thanks

Nick

View solution in original post

Marcin Latosiewicz · ‎07-03-2013

Nick,

IPsec is not supported at all on cat4500 platform.

We're working on removing IKE/IPsec commands from new parser in IOS XE:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuh60386

M.

(Editted typos)

nicholas boran wrote:

Hello

I have been trying to find the configuration guides for a cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG, with entservices license.

We have an immediate requirement to build a HA IPSEC VPN from two 4507RE switches, while we wait for new ASA's to be provisioned. I don't think we can do it, in HA setup.

Advice is very welcome.

Thanks

Nick

nicholas boran · ‎07-04-2013

Thanks for the prompt response Marcin. Will look at other options.

Nick