VPN failover

[gbronline]

Hi, i have site-to-site tunnel between site 1 and site 2. Site 1 has one cisco 2611 and site 2 has two 1710s. How can i configure the two 1710s at site 2 for failover . Both 1710s are connected to same ISP . What i am trying to do is very similar as in the link below except that i have 2 1710 and NOT 7200s. http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps5012/products_feature_guide09186a0080116d4c.html

I tried the same config as described in the link but i coud not use the command "Crypto isakmp ssp id"

The IOS version on 1710s are 12.2(13)T4.

Thanks.

[gbronline]

Any input on this is higly appreciated. Thanks.

[marcusl]

Hi,

That link states the following:

Supported Platforms

•Cisco 7200 series

I'm afraid that it's not possible to acheive HA on 17xx.

Best regards,

/M

[gbronline]

The attached config does provide me failover in case there is any problem with one of the router but whenever the standby router becomes an Active router i get the following message on the router:

%CRYPTO-4-IKMP_NO_SA: IKE message from 12.145.226.252 has

no SA and is not an initialization offer

Is there anything that can be done to avoid this message whenever the state of the router changes from standby to active?

Thanks.