We had a firewall failure over the weekend which crippled a remote site. We have a VPN concentrator at another main site and we were wondering if we could use this for a "backup" tunnel for the remote site (the primary line is a tunnel to a separate main site - a router-to-router VPN). Can you have multiple cryptomaps on 1 interface (at the remote)? How could you force traffic down the primary and only use the secondary tunnel for backup (the primary tunnel is GRE with static routes, the VPN concentrator does participate in our OSPF network)? Thanks in advance.