We have two datacenters, each with an ASA that has numerous tunnels to peers on the internet. The routes for the tunnels are redistributed like this:
ASA-DC1 ---> SWI-DC1 ---> SWI-DC2 ---> ASA-DC2
.................EIGRP............External BGP........EIGRP..............
When DC1 has internet access, we'd like all tunnel routes to go through ASA-DC1, even if they pass through SWI-DC2. The failover route should be to ASA-DC2. I can think of a number of ways to do this but I'm looking for input for the best way. A big problem is that I think routes will be looped if we just redistribute like normal, since eBGP has a lower AD than EIGRP.