Hello, I’ve configured a IPsec tunnel between a remote site ASA and a headend ASA. The remote site ASA has 2 Internet circuits so 2 crypto maps tied to each outside interface. The headend ASA has one internet circuit with one crypto map with 2 peers. Failover is configured on the remote ASA via ip sla and tracking. Failover is working correctly and the tunnels are getting established but for the first 15 mins there are consistent flapping and then it stables out. What would be the reason for that? Is there anything I can configure on the headend ASA to flush the dead tunnel? Maybe tunnel keepalives or dead peer detecttion?
