I have issue with IPSec over TCP when combined with VRRP. The following is how it doesn`t work
1. VRRP Master failed.
2. The VRRP Backup becomes Master and take over the Master`s IP address.
3. A VPN Client tried to make a connection to the Master`s IP address with TCP port 10000.
4. No response from the Master that was a Backup.
5. The client tried for several times until it gave up the TCP connection.
Do you have any chance to open a case to the TAC ?
Regards,
Engel