Re: IPSEC in High Availability scenarios

["Wei-Jen Yeh" <weijyeh@nortelnetworks.com>]

Hi,
  You need to handle replay info from both sender & receiver
perspectives, and
there's also the lifetime info that needs to be considered.
  How about redundancy support for the KMP?
  What if you need to have secured traffic to the spare unit,
too?
  You also need to engineer your `private network' based on the
amount of
SAs that need to be mirrored (assuming you go this route) and do your
queuing
right!
-- 
Wei-Jen Yeh
weijyeh@nortelnetworks.com      Nortel, RTP, NC
Office Phone: (919) 991-2707,   ESN: 35-12707
Fax: (919) 991-8073