cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1335
Views
0
Helpful
1
Replies

Configuring HA (using HSRP) for Remote Access VPN on CSR 1000v routers

dtochilovsky
Level 1
Level 1

Hello All,

I have a CSR 1000v router which is configured for Remote Access VPN using Anyconnect mobility client, but I'd like to configure another CSR 1000v router to use as a standby in case the primary one fails. I assume I can use HSRP for failover and HA in this case.

The Remote Access VPN is configured using IKEv2 FlexVPN.

The question I have is are tehre any special requirements/configuration required for the failover/HA in terms of the FlexVPN for Remote access on the primary and the standby routers?

Has anyone ever attempted and been successful in this regard?

Thank you.

1 Reply 1

Graham Bartlett
Cisco Employee
Cisco Employee

Hello

Sounds like you need IKEv2 Load Balancer

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-clb-supp.html

This uses Flex and is a very nice feature.

cheers

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: