Management HA over VPN help

[phollan1]

We have two management servers configured as an HA pair, they are in two different location which have a VPN connecting them together.

They cannot seem to communicate, it is sending the traffic via implied rules and is therefore not encrypting down the tunnel. I have tried NATing the traffic and sending it across the internet but it does not seem to work

Error is Synchronize Pair Failure and the info related to that is Mgnt_Sync. Error: Failed to connect to the peer

[chillyjim]

You will have to disable the implied rules and add in manual rules as needed.

[decurion]

phollan1,
did you ever get this to work? I'm in the same situation and havent found a way to get this working.

chillyjim,
is there guidelines somewhere on how to to this? I've tried manually implementing the implied rules before and I didn't work too well.

[Thorpuse]

Originally Posted by chillyjim

You will have to disable the implied rules and add in manual rules as needed.

Another good case for more/better granular controls on implied rules actions. Insert RFE here....

[phollan1]

As yet I haven't attempted this.

I am looking to implement the changes within the next couple of weeks though.

Will let you know when I have done it and whether it worked or not