IPSEC VPN TUNNEL PRIORITY ON CISCO ROUTER 1111

[Netplace Support]

Hi Team,

I'm having Cisco Router 1111-8P configured ipsec site to site vpn tunnel with my DC location Router. Currently i required to configure another ipsec site to site vpn tunnel for standby/Secondary on same Cisco Router 1111-8P , if my first ipsec site to site vpn tunnel fails, traffic should go via Secondary ipsec tunnel

So could anyone guide me what are configuration/priority values i need to do for secondary ipsec tunnel if primary goes down.

Attached is the configuration notepad for primary and Secondary ipsec tunnel.

regards,

vishal

[Georg Pauwen]

Hello,

I think the 1111 supports the IPsec Preferred Peer feature (which works in conjunction with dead peer detection). Basically, you set one (the preferred) peer as the default, and the second peer will be the backup:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/15-mt/sec-vpn-availability-15-mt-book/sec-ipsec-pref-peer.html