only one KS

[Mahmoud]

Hello,

I have to implement GETVPN solution but with only one KS as first phase

my question is what happen if this KS is down?

I need the traffic pass normally without encryption till the KS is up again.

[Mohammed al Baqari]

If KS is dead, VPN renewal won't take place. I think you can use EEM to do
changes to send traffic as clear text and then encrypt when KS is up. You
need to track the syslogs for KS up or down