HA Design for EZVPN

[johnlloyd_13]

hi,

i've been searching for an high availability/redundant design for EZVPN server using an IOS router. but i can only find that's related to HSRP.

my question is can EZVPN support HA? i.e. somewhat similar to ASA firewall active/standby HA setup.

[Marius Gunnerud]

The closest you will come to this without actually switching to ASAs is using HSRP with stateful switchover (SSO).

Have a look at the following link:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/15-mt/sec-vpn-availability-15-mt-book/sec-state-fail-ipsec.html#GUID-484562B6-A113-4901-A630-37869F8494D8