
Assume you have two ASA's:
ASA1 with primary interface 1.1.1.1 and a backup interface 2.2.2.2
ASA2 with primary interface 3.3.3.3 and a backup interface 4.4.4.4
Established between the two devices is a site-to-site tunnel.
Ex. ASA1 connects to public IP 3.3.3.3 and ASA2 connects to public IP 1.1.1.1 to establish the tunnel.
In the event the primary interface on either device is no longer accessible, how do you configure the site-to-site tunnel to re-establish on the backup interface?
Ex. ASA2's primary interface 3.3.3.3 is down and traffic begins to route via backup interface 4.4.4.4 to the internet. The site-to-site tunnel drops because interface 3.3.3.3 is no longer reachable from ASA1.