HA and LSVPN in 10.1

MatthewSabin — Fri, 04 Nov 2022 18:23:44 GMT

Back in 9.x we feel like the HA peers had no trouble passing LSVPN from active to passive when an HA failover event occurred.

Now in 10.1 we're seeing about half of our sites fail to bring up the tunnels when HA moves from active to passive.

I've been unable to find clear documentation on what to expect in an HA event as far as LSVPN is concerned.

I'm guessing it's related to authentication-cookie expirations or a failure of the active to pass the cookie to the passive or something like that.

Can anyone help me figure out what to check to predict whether a site will be able to roll LSVPN in an HA event? Cookie lifetime or whatever?

Re: HA and LSVPN in 10.1

JayGolf — Tue, 08 Nov 2022 15:58:44 GMT

Hi @MatthewSabin ,

I haven't found any documentation regarding failover and LSVPN. If I do, I'll definitely share it here. I would reach out to TAC. regarding this issue to get your sorted out quickly.

topic Re: HA and LSVPN in 10.1 in General Topics

HA and LSVPN in 10.1

Re: HA and LSVPN in 10.1