Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

vpn with hssrp

Hi

i have routers with hsrp

Vpn cannot be configured with virtual ip right ?

when the active router goes of standy by will become active.

shall i need to configure vpn on both routers.so what are the changes need to do at far end ?

What about the peer  ip that the far end needs to configure the vpn

Everyone's tags (2)
1 REPLY
Hall of Fame Super Silver

vpn with hssrp

Hello Prashant,

using the HSRP VIP address as IPSec endpoint is supported.

Actually there is also a feature called stateful failover for IPSec that may be helpful. The feature adds the capability for the two routers to share information about the IPSec and IKE current SAs, to make switchover as smooth as possible.

It uses HSRP groups on the internal and on the external interface that have to be synchronized (the same router has to be the HSRP Active on both at the same time)

see

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t11/feature/guide/gt_topht.html

Hope to help

Giuseppe

191
Views
4
Helpful
1
Replies