I currently have a pair of 2821s with an IPsec tunnel between them. If I wanted to have redundancy - could I add HSRP to the GigE interface (these are one-armed VPN configurations out of necessity) and a partner HSRP 2821 on each end? That is - to IPsec is an HSRP VIP just as good as a real address bound to a real interface? Thanks.
I would be better to use IPsec Preferred Peer and Dead peer Detection (DPD) to achieve redundancy