1) In the backup concentrator what is the ""ROle"Master/Backup1.?
The backup with a number after it is the precedence of that VPN concentrator in the VRRP group. It looks to me as though Backup1 is the highest precendence of the backup concentrators, followed by .2, .3, etc.
2) Vrrp IP ,i can use same physical ip for master or i have to configure seperate IP for VRRP?
On the Master system, the VRRP entries are the IP addresses configured on its Ethernet interfaces, and the Manager supplies them by default.
On a Backup system, the fields are empty by default, and you must enter the same IP addresses as those on the Master system.
3)Lan-Lan IPec will establish the VRRP IP?
If the Master fails, the Backup begins to service traffic formerly handled by the Master. This switchover occurs in 3 to 10 seconds. While IPsec and
Point-to-Point Tunnel Protocol (PPTP) client connections are disconnected during this transition, users need
only to reconnect without changing the destination address of their connection profile. In a LAN-to-LAN
If you are referring to the master concentrator, you can change the physical IP on that box, which will change the VRRP IP, which you will use on the backup concentrators and the remote peer address on your remote site gateways.
I would also clear the ARP caches on the other devices that share a network with the master concentrator.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...