Re: Router 3DES VPN to Pix Failover [7:46813]

2002-06-18 Thread Gaz
In case anybody is interested: Managed to find the answer eventually. Stateful failover is not supported for VPN (from TAC), so the SA's must be cleared every time a change of active Pix occurs. Had the right idea with th lifetime of the CA's but applying it incorrectly. Have managed to get the de

RE: Router 3DES VPN to Pix Failover [7:46813]

2002-06-18 Thread Whitis, Drew (SIGNAL)
Are you doing LAN based failover or using the proprietary heartbeat cable? There are many undocumented bugs with 6.2 code when using LAN based failover. If noone else on the forum can recommend a configuration change, I would go back to 6.1(3). Drew -Original Message- From: Gaz [mailto: