How Does the VPN 3000 Concentrator Implement VRRP?
• Redundant VPN Concentrators are identified by group. • A single Master is chosen for the group. • One or more VPN Concentrators can be Backups of the group’s Master. • The Master communicates its state to the Backup devices. • If the Master fails to communicate its status, VRRP tries each Backup in order of precedence. The responding Backup assumes the role of Master. Note: VRRP enables redundancy for tunnel connections only. Therefore, if a VRRP failover occurs, the backup only listens to tunnel protocols and traffic. Pinging the VPN Concentrator does not work. Participating VPN Concentrators must have identical configurations. The virtual addresses configured for VRRP must match those configured on the interface addresses of the Master.