- Bronze, 100 points or more
On the ISR's you can specify more than one peer (set peer) for an IPSEC tunnel and in the event the one peer (default) goes down the second one will be tried.
I was just wondering if the same thing is possible on an ASA? I would like a branch ASA to try the primary site and in the event the primary site is unavailable try to establish a tunnel to the secondary site. This is down without HSRP as the secondary site may be in a different country. DPD and RRI would also be something I wouls like to do at the ASA, so the routes can be dynamically re-injected into OSPF.
Thanks in advance,