I am in the process of working out a failover network. we have a 10mbit line coming in from XO and 2 t1's coming from Sprint. I have a 2811 with the advsecurity IOS for firewall and vpn. Here is what we want to achive. We have 4 sites all connected via PIX point to point VPN's. I want to take the Pix's out of the equation, and use the 2811's as the firewalls and VPN. In a normal situation all sites would be talking on thier XO links. If XO goes down I want the T1's to kick in. Is this possable??