L2L VPN Static to Dynamic with Redundancy

[ahmad82pkn]

Hi i have IPSEC VPN configured between two Cisco Routers.

one end Dyamic , head End Static. and it works like a charm,

Now what i want to acheive is.

If my Head end goes down, i want Remtoe End to connect to scond Head end.

is that possible?

currently on my Remote end, i have configured this way ( Partial configuration )

crypto map vpn 10 ipsec-isakmp

set peer 8.2x.1x.4

set transform-set weak

match address 100

what i want is if 8.2x.1x.4 is unreachable, then VPN gets connected to second head end lets say 1.1.1.1

any help would be great.

[rizwanr74 · Accepted solution]

Hello Ahmad,

Yes it is possible.

You set primary peer as your default and so, the default peer will be always prefered.

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_s2.html#wp1046908

thanks

Rizwan Rafeek

[ahmad82pkn]

thanx