06-24-2010 01:33 PM
Hi,
On the ISR's you can specify more than one peer (set peer) for an IPSEC tunnel and in the event the one peer (default) goes down the second one will be tried.
I was just wondering if the same thing is possible on an ASA? I would like a branch ASA to try the primary site and in the event the primary site is unavailable try to establish a tunnel to the secondary site. This is down without HSRP as the secondary site may be in a different country. DPD and RRI would also be something I wouls like to do at the ASA, so the routes can be dynamically re-injected into OSPF.
Thanks in advance,
Bob James
Solved! Go to Solution.
06-24-2010 01:42 PM
06-24-2010 01:35 PM
Hi Bob,
The same exact thing is possible in ASAs.
crypto map mymap 10 set peer x.x.x.x y.y.y.y
Federico.
06-24-2010 01:41 PM
Thank you, what about DPD and RRI?
Thanks again
06-24-2010 01:42 PM
Same thing.
Federico.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: