redirect traffic to new VPN Peer

[richyvrlimited]

I have a bunch of S2S VPN's terminating to an edge ASA firewall.

I'd like to add a new ASA/FTD appliance inside our network for the VPN's to terminate to. We have dual WAN circuits so if a specific circuit drops currently we lose the VPN connections until it is restored, moving the peer device inside means the traffic should reroute automatically via the alternate WAN circuit.

Is it possible to redirect currently configured VPN traffic to another address (DNAT?) to save having to contact each supplier to reconfigure their peer address.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security-vpn/security-vpn/216709-configure-failover-for-ipsec-site-to-sit.html

[richyvrlimited]

thanks, but that requires the other end to reconfigure with a failover address. I'm hoping to avoid, or at least delay the requirement to contact a lot of customers to reconfigure their VPN.

[MHM Cisco World]

sorry I think there is no other way