[j-nsp] Vpn in active/active HA

[Sidney Boumendil]

On 8/29/08, SunnyDay <cscosunny at gmail.com> wrote:
> Hello is there anything specific setting to watch out for when configuring a
> vpn in
> two ssg when in high availability active/active state?

Hello,

If you are going to use certificate authentication for some tunnels,
be sure to configure a nsrp cluster name and issue your certificates
with this name so as not to disrupt the ipsec tunnel in case of vsd
group failover.

B.R

Sidney