Hello, We found the best way to keep the tunnel active is to have a couple of triggers for the interesting traffic on the other side. For example leave a jetdirect, switch or some other pingable device on the dynamic site so icmp replies will ke...

Hello, Not sure what version this came out, but try on both PIX sides: management-access inside.I can telnet, ping, etc... to the insides of both tunnels points with this.

Hello, Don't know if this will help, but we have succesfully used IKE failovers with PIX units to various Cisco gear, however we are using dynamic crypto map in a hub and spoke configuration as opposed to static tunnels (same concepts though). ...