BACKUP for Site to Site VPN

[Zahan Al-Rashid]

Hi, 

I was wondering is it possible to create a backup for my site to site VPN connection? the remote end has a cisco Router whiich currently has a VPN connection to an ASA 5500. How would I know configure the same router to use another VPN on a different ASA 5500 should the ASA 5500 not work? Will simply putting adding another Peer address on the ISAKMP policy do or do I need to create a new crypto map or is it simply not possible?

Thanks for your assistance in advance. 

[Rudy Sanjoko]

You can do this by adding another crypto map on your router. The crypto map name should be the same as the one existing in your configuration but you will need to change the number on that crypto map. This is because you can only apply one crypto map on your interface. 

Your crypto map configuration should look like this:

crypto map MAP 10 ipsec-isakmp

set peer IP1, match, transform set, etc.

crypto map MAP 20 ipsec-isakmp

set peer IP2, match, transform set, etc.