USG FlexH500 HA / VPN Ike2 Cert

Fred_77
Fred_77 Posts: 121  Ally Member
5 Answers First Comment Friend Collector Fourth Anniversary

Hi everyone, I need to setup a client-to-site ike2 VPN with a self-signed certificate on a pair of Flex 500H in HA. My question: What happens to the certificate when failover occurs? Will external clients continue to connect? Or not?

Thanks in advance

Lorenzo

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,941  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @Fred_77,

    When you import, the certificate is applied to the HA master and slave. Therefore, the remote access VPN client's connection should not be affected.

    May I know if you encountered any issues in this scenario?

    Zyxel Melen