Tunnel Persistence - Avaya 3.7 Configuration Manual

Note:
The VSU determines what type of authentication it permits, but this is dependent
Note:
upon the authentication policy last downloaded from VPNmanager (SuperUser
Password OFF or ON). Remember that if you set the SuperUser Password to
OFF you are no longer able to connect to the VSU using the SuperUser account.
The only way to recover SuperUser authentication is to change the setting to
back to ON, then do one of the following:
1. Authenticate via your LDAP user account or
2. Go to the VSU console and reset the Configuration/VPNmanager Authorization/
Authorization Provider value to SuperUser/LDAPuser, then authenticate by either your
LDAPuser account or SuperUser account.

Tunnel Persistence

This feature consists of the following radio buttons:
Maintain VPN tunnels on device update
Rebuild all VPN tunnels on device update
In a multiple VPN structure with tunnel persistence set to Maintain VPN tunnels on device
update, traffic is interrupted within the modified VPN only. In a multiple VPN structure with
tunnel persistence set to Rebuild All VPN tunnels on device update, all VPNs related to the
modified device are interrupted until the configuration update is complete.
Figure 63, illustrates tunnel persistence between SGs. If Maintain VPN tunnel is enabled, the
addition of SG
D
modifications have not been made in VPN
remain persistent.
to VPN interrupts and re-establishes tunnel persistence in VPN
2
(SG and SG ), or VPN
1 A B
Device Advanced
only. Because
2
(SG and SG ) tunnels
3 B D
Issue 4 May 2005 207