Thanks for the detailed reply GreenMan. Agreed that Z3 cannot be in a warm spare formation at a branch. Looking at this statement from the doc you shared: "To leverage DC-DC failover, the branch site must have at least two hubs defined in the site-to-site VPN page that advertise the same subnet into the AutoVPN topology (split tunnel) or that the default route checkbox is selected for (full tunnel)." The question now becomes, will a Z3 create tunnels to both the hubs defined, at the same time? Or will it create the tunnel to lower priority hub after the higher priority hub as failed? The reason is we want to quantify if the TCP connections will drop, voice applications suffer etc. upon a DC failure.
... View more