IPsec Virtual Private Network Fundamentals

Chapter 6. Solutions for Local Site-to-Site High Availability As we discussed in Chapter 5, "Designing for High Availability," there are many ways to design for High Availability (HA) in IPsec virtual private network (VPN) designs....

Using Multiple Crypto Interfaces for High Availability It is very common for a networked IPsec VPN endpoint in a site-to-site deployment to have multiple interfaces available for IPsec configuration. One technique that can be used for local HA is ...

Stateless IPsec VPN High-Availability Alternatives Stateless IPsec VPN HA refers to a scenario in which the state of a given Phase 1 or Phase 2 SA is not replicated to another separate, redundant IPsec device. In this section, we will discuss solu...

Stateful IPsec VPN High-Availability Alternatives Site-to-Site IPsec HA can be designed to reconverge quicker upon failover when a stateful design alternative is used. Recall that in stateless IPsec failover, there is a reconvergence delay directl...

Summary In this chapter, we discussed several key components that comprise a highly available IPsec VPN design. These components provide local IPsec HA in either of two design strategiesstateful or stateless IPsec HA designs. Stateless IPsec VP...