Could use some assistance with IPSEC\VPN between routers.

[Richard Stanger]

Could use some assistance with IPSEC\VPN between 2851 routers.  I have 4 routers 2 at each site using HSRP on the front and I need to encrypt traffic between.  My concern is the failover portion.  Has anyone else done this? 

Thank you for your help!

Rick

[sean_evershed · Accepted solution]

See below a configuration example from the IPSec VPN Design Guide.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/Dir_Encap.html#wp80687

Don't forget to rate posts that are helpful.

[Latchum Naidu · Accepted solution]

Hi Rick,

Actually the concept for your scenario is that Stateful Failover for IPsec is designed to work in conjunction with Stateful Switchover (SSO) and Hot Standby Router Protocol (HSRP).

Once that doen then you can use the VIP for IPSec peers.

See the below link for examle scenarios and configs.

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/white_paper_c11_472859.html

Please click on the correct answer on all posts if they answered your question.
Regards,
Naidu.