Cisco Cisco IOS Software Releases 12.2 MC Livre blanc
IPSec Stateful Failover (VPN High Availability)
Feature Overview
4
Cisco IOS Release 12.2(11)YX, 12.2(11)YX1, 12.2(14)SU, 12.2(14)SU1, and 12.2(14)SU2
Figure 3
HSRP VIP on Outside, RRI Injected Routes on Inside
Figure 4
GRE HA with VIPs on the Outside and Inside Faces
114187
Head-End
A
S
Outside
VIP
Remote LAN
Peer
Private LAN
Reverse Route Injection (RRI) is configured
on the head-end router when the tunnel is forming.
RRI injects static routes to the remote network.
RRI
Routes
114415
Head-End
A
S
Inside
VIP
Remote
LAN
Remote Peer
Private LAN
Inside VIP configured as default gateway
for route from private LAN to remote LAN
Remote Peer
GRE Tunnel
GRE Tunnel
Internet
Outside
VIP