cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
328
Views
0
Helpful
3
Replies

Equivalent of Set Peer on ASA's - Alternate site L2L tunnel

bjames
Level 5
Level 5

     Hi,

On the ISR's you can specify more than one peer (set peer) for an IPSEC tunnel and in the event the one peer (default) goes down the second one will be tried.

I was just wondering if the same thing is possible on an ASA? I would like a branch ASA to try the primary site and in the event the primary site is unavailable try to establish a tunnel to the secondary site. This is down without HSRP as the secondary site may be in a different country. DPD and RRI would also be something I wouls like to do at the ASA, so the routes can be dynamically re-injected into OSPF.

Thanks in advance,

Bob James

1 Accepted Solution

Accepted Solutions

Same thing.


Federico.

View solution in original post

3 Replies 3

Hi Bob,

The same exact thing is possible in ASAs.

crypto map mymap 10 set peer x.x.x.x y.y.y.y

Federico.

Thank you, what about DPD and RRI?

Thanks again

Same thing.


Federico.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: