Configuring HA (using HSRP) for Remote Access VPN on CSR 1000v routers

[dtochilovsky]

Hello All,

I have a CSR 1000v router which is configured for Remote Access VPN using Anyconnect mobility client, but I'd like to configure another CSR 1000v router to use as a standby in case the primary one fails. I assume I can use HSRP for failover and HA in this case.

The Remote Access VPN is configured using IKEv2 FlexVPN.

The question I have is are tehre any special requirements/configuration required for the failover/HA in terms of the FlexVPN for Remote access on the primary and the standby routers?

Has anyone ever attempted and been successful in this regard?

Thank you.

[Graham Bartlett]

Hello

Sounds like you need IKEv2 Load Balancer

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-clb-supp.html

This uses Flex and is a very nice feature.

cheers