<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic interchassis redundancy with SSO do not work in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329050#M947776</link>
    <description>&lt;P&gt;Hi, I'm trying to configure high available VPN, for studying purpose.&lt;/P&gt;&lt;P&gt;Here the topology I use:&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://bmigette.fr/wp-content/uploads/2009/10/slb_ha1.png" target="_blank"&gt;http://bmigette.fr/wp-content/uploads/2009/10/slb_ha1.png&lt;/A&gt;&lt;/P&gt;&lt;P&gt;All the routers can ping each other.&lt;/P&gt;&lt;P&gt;I set this configuration on IAR1 and IAR2:&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;redundancy inter-device&lt;/P&gt;&lt;P&gt; scheme standby HSRPSYNC&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;redundancy&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;ipc zone default&lt;/P&gt;&lt;P&gt; association 1&lt;/P&gt;&lt;P&gt;  no shutdown&lt;/P&gt;&lt;P&gt;  protocol sctp&lt;/P&gt;&lt;P&gt;   local-port 5000&lt;/P&gt;&lt;P&gt;    local-ip 10.254.3.2&lt;/P&gt;&lt;P&gt;    retransmit-timeout 300 10000&lt;/P&gt;&lt;P&gt;    path-retransmit 10&lt;/P&gt;&lt;P&gt;    assoc-retransmit 10&lt;/P&gt;&lt;P&gt;   remote-port 5000&lt;/P&gt;&lt;P&gt;    remote-ip 10.254.3.1&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;but nothing happens, even if I set debug ipc all, debug redundancy status and debug redundancy inter-chassis.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;doing show ipc status give me 0 RX/Tx for all values&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;IAR2#sh redundancy inter-device &lt;/P&gt;&lt;P&gt;Redundancy inter-device state: RF_INTERDEV_STATE_PC_NO_HSRP&lt;/P&gt;&lt;P&gt;  Scheme: Standby&lt;/P&gt;&lt;P&gt;      Groupname: HSRPSYNC Group State: Init&lt;/P&gt;&lt;P&gt;  Peer present: RF_INTERDEV_PEER_COMM&lt;/P&gt;&lt;P&gt;  Security: Not configured&lt;/P&gt;&lt;P&gt;IAR2#sh standby bri&lt;/P&gt;&lt;P&gt;                     P indicates configured to preempt.&lt;/P&gt;&lt;P&gt;                     |&lt;/P&gt;&lt;P&gt;Interface   Grp Prio P State    Active          Standby         Virtual IP     &lt;/P&gt;&lt;P&gt;Fa0/1       0   100    Active   local           10.254.3.1      10.254.3.254   &lt;/P&gt;&lt;P&gt;IAR2#&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I use IOS 12.4-25b on a 7200 router&lt;/P&gt;&lt;P&gt;Any clues ?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Many thanks&lt;/P&gt;</description>
    <pubDate>Fri, 21 Feb 2020 11:43:52 GMT</pubDate>
    <dc:creator>bastien.migette</dc:creator>
    <dc:date>2020-02-21T11:43:52Z</dc:date>
    <item>
      <title>interchassis redundancy with SSO do not work</title>
      <link>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329050#M947776</link>
      <description>&lt;P&gt;Hi, I'm trying to configure high available VPN, for studying purpose.&lt;/P&gt;&lt;P&gt;Here the topology I use:&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-custom" href="http://bmigette.fr/wp-content/uploads/2009/10/slb_ha1.png" target="_blank"&gt;http://bmigette.fr/wp-content/uploads/2009/10/slb_ha1.png&lt;/A&gt;&lt;/P&gt;&lt;P&gt;All the routers can ping each other.&lt;/P&gt;&lt;P&gt;I set this configuration on IAR1 and IAR2:&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;redundancy inter-device&lt;/P&gt;&lt;P&gt; scheme standby HSRPSYNC&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;redundancy&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;ipc zone default&lt;/P&gt;&lt;P&gt; association 1&lt;/P&gt;&lt;P&gt;  no shutdown&lt;/P&gt;&lt;P&gt;  protocol sctp&lt;/P&gt;&lt;P&gt;   local-port 5000&lt;/P&gt;&lt;P&gt;    local-ip 10.254.3.2&lt;/P&gt;&lt;P&gt;    retransmit-timeout 300 10000&lt;/P&gt;&lt;P&gt;    path-retransmit 10&lt;/P&gt;&lt;P&gt;    assoc-retransmit 10&lt;/P&gt;&lt;P&gt;   remote-port 5000&lt;/P&gt;&lt;P&gt;    remote-ip 10.254.3.1&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;but nothing happens, even if I set debug ipc all, debug redundancy status and debug redundancy inter-chassis.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;doing show ipc status give me 0 RX/Tx for all values&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;IAR2#sh redundancy inter-device &lt;/P&gt;&lt;P&gt;Redundancy inter-device state: RF_INTERDEV_STATE_PC_NO_HSRP&lt;/P&gt;&lt;P&gt;  Scheme: Standby&lt;/P&gt;&lt;P&gt;      Groupname: HSRPSYNC Group State: Init&lt;/P&gt;&lt;P&gt;  Peer present: RF_INTERDEV_PEER_COMM&lt;/P&gt;&lt;P&gt;  Security: Not configured&lt;/P&gt;&lt;P&gt;IAR2#sh standby bri&lt;/P&gt;&lt;P&gt;                     P indicates configured to preempt.&lt;/P&gt;&lt;P&gt;                     |&lt;/P&gt;&lt;P&gt;Interface   Grp Prio P State    Active          Standby         Virtual IP     &lt;/P&gt;&lt;P&gt;Fa0/1       0   100    Active   local           10.254.3.1      10.254.3.254   &lt;/P&gt;&lt;P&gt;IAR2#&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I use IOS 12.4-25b on a 7200 router&lt;/P&gt;&lt;P&gt;Any clues ?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Many thanks&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 11:43:52 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329050#M947776</guid>
      <dc:creator>bastien.migette</dc:creator>
      <dc:date>2020-02-21T11:43:52Z</dc:date>
    </item>
    <item>
      <title>Re: interchassis redundancy with SSO do not work</title>
      <link>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329051#M947777</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I hope you don't have the exact same config on both, maybe you forgot to change : &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;local-ip 10.254.3.2&lt;/P&gt;&lt;P&gt;remote-ip 10.254.3.1 &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;to &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;local-ip 10.254.3.1&lt;/P&gt;&lt;P&gt;remote-ip 10.254.3.2&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;on the other router ?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 13 Oct 2009 21:43:41 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329051#M947777</guid>
      <dc:creator>jan.nielsen</dc:creator>
      <dc:date>2009-10-13T21:43:41Z</dc:date>
    </item>
    <item>
      <title>Re: interchassis redundancy with SSO do not work</title>
      <link>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329052#M947779</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Yes, I parsed only one, but I set the correct IP addresses. &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 13 Oct 2009 22:20:36 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/interchassis-redundancy-with-sso-do-not-work/m-p/1329052#M947779</guid>
      <dc:creator>bastien.migette</dc:creator>
      <dc:date>2009-10-13T22:20:36Z</dc:date>
    </item>
  </channel>
</rss>

