AppendixB Site-to-Site VPN User Interface Reference
Create VPN Wizard
B-36
User Guide for CiscoSecurity Manager3.0.1
OL-8214-02
Hold Time The duration in seconds (within the range of 2-255) that a standby
hub will wait to receivea hello message from the active hub before
concluding that the hub is down.
Standby Group
Number (Inside) The standby number of the inside hub interface that matches the
internal virtual IP subnet for the hubs in the HA group. The number
must be within the range of 0-255.
Standby Group
Number (Outside) The standby number of the outside hub interface that matches the
externalvirtual IP subnet for the hubs in the HA group. The number
must be within the range of 0-255.
Note The outside standby group number must be different to the
inside standby group number.
Stateful Failover When selected, enables SSO for stateful failover.
You can only configure stateful failover on an HA group that
contains two hubs which are Cisco IOS routers. This check box is
disabled if the HA group contains more than two hubs.
Note When deselected, stateless failoveris configured on the HA
group. Stateless failover will also be configured if the HA
group contains more than two hubs. Stateless failover may
be configured on Cisco IOS routers or Catalyst 6500/7600
devices.
For more information, see Enabling Stateful Failover, page9-50.
OK button Saves yourchanges locally onthe client and closes the dialog box.
Note When you select the new or edited hub-and-spoketopology
in the Site-to-Site VPN Manager window, the VPN
Summary page displays the details of the High Availability
policy configured. SeeVPN Summary Page, page B-3.
Cancel button Closes the dialog box without saving your changes.
Help button Opens help for this tab.
TableB-13 Create VPN wizard> High Availability Page (continued)
Element Description