Doesn't matter. As I said in my first email "You must have an AIM-VPN module to test this feature" ;)
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Technical Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com/> www.ipexpert.com From: Kingsley Charles [mailto:[email protected]] Sent: Tuesday, April 06, 2010 12:57 PM To: Brandon Carroll Cc: Tyson Scott; [email protected] Subject: Re: [OSL | CCIE_Security] IPSec with SSO All the ISRs has inbuilt onboard VPN module. With regards Kings On Tue, Apr 6, 2010 at 9:03 PM, Brandon Carroll <[email protected]> wrote: Tyson is correct. I was thinking of Stateful Failover minus the IPSec part. ipc zone default association 1 no shutdown protocol sctp local-port 55001 local-ip 9.9.156.6 remote-port 50001 remote-ip 9.9.156.11 http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_f wall_state_fov.html#wp1167791 I did in fact forget about the requirements: The Cisco Integrated Services Routers (ISRs) and the VPN modules that support stateful failover for IPsec are as follows: -The AIM-VPN/BPII-PLUS and AIM-VPN/SSL-1 hardware encryption modules are supported in a Cisco 1841 router. -The AIM-VPN/EPII-Plus and AIM-VPN/SSL-2 hardware encryption modules are supported in Cisco 2801, 2811, 2821 and 2851 routers. -The AIM-VPN/EPII+ and AIM-VPN/SSL-3 hardware encryption modules are supported in a Cisco 3825 router. -The AIM-VPN/HPII+ and AIM-VPN/SSL3 hardware encryption modules are supported in a Cisco 3845 router. -The VPN Acceleration Module (VAM) and VAM2 hardware encryption modules are supported in a Cisco 7200 series router. Found here: http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/gu ide/sec_failover_ipsec_ps6441_TSD_Products_Configuration_Guide_Chapter.html# wp1043332 Regards, Brandon Carroll - CCIE #23837 Senior Technical Instructor - IPexpert Mailto: [email protected] Telephone: +1.810.326.1444 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> On Apr 6, 2010, at 8:23 AM, Tyson Scott wrote: You must have an AIM-VPN module installed to do testing with SSO. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Technical Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website atwww.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Tuesday, April 06, 2010 7:17 AM To: [email protected] Subject: [OSL | CCIE_Security] IPSec with SSO Hi all I am trying to configure IPSec with SSO. router1#show redundancy states my state = 13 -ACTIVE peer state = 1 -DISABLED Mode = Simplex Unit ID = 0 Can someone please let me know the reasons, why the peer state is disabled. With regards Kings _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com <http://www.ipexpert.com/>
<<image001.gif>>
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
