Abstract: An IPsec-capable node 2, such as a security gateway 2, is provided for a virtual private network 1. The security gateway 2 contains a CPU 4 having a volatile memory 5 in which is stored, among other things, a security association database for controlling secure communications between the network and external users. A controller 6 periodically stores the security association database in a disk memory 7 or other nonvolatile memory. When a restoration of power to the security gateway is detected following a power failure, the controller 6 retrieves the latest security association database from the memory 7 and injects it into the volatile memory 5 whose contents were lost during the power failure. The security gateway 2 may then restore secure communication with external users.

Abstract: An IPsec-capable node 2, such as a security gateway 2, is provided for a virtual private network 1. The security gateway 2 contains a CPU 4 having a volatile memory 5 in which is stored, among other things, a security association database for controlling secure communications between the network and external users. A controller 6 periodically stores the security association database in a disk memory 7 or other nonvolatile memory. When a restoration of power to the security gateway is detected following a power failure, the controller 6 retrieves the latest security association database from the memory 7 and injects it into the volatile memory 5 whose contents were lost during the power failure. The security gateway 2 may then restore secure communication with external users.