Reece, I forgot to tell that you need to configure a tunnel-group for "y.y.y.y" as well with the pre-shared-key.

Hi Reece, You can use the crypto map command to add both IP addresses in the remote end: "crypto map <mapname> <#> set peer <x.x.x.x> <y.y.y.y>" The ASA will try to negotiate with peer "x.x.x.x". If "x.x.x.x" is down or doesn't respond, it will t...