S2S with ISP failover

[majedalanni]

Dears

I have question how to setup a VPN failover with a failover ISP

my senario

ASA(1) -------------------------------        internet        --------ISP1--------------   ASA(2)

                                                                      -------ISP2---------------- ASA(2)

My ASA (1) have S2S tunnle configured to ASA(2) ISP1 interfate. ASA(2) have ISP failover. When ISP1 down I lost the tunnel connection!

Should I creat another S2S tunnel to ASA(2) ISP2 interface or the is another way to do it?

Thanks in advance!

Mike

[Jennifer Halim]

No, you can't create another S2S tunnel.

On ASA (1), just configure 2 IP Address on the "set peer" command, first with the first ISP and second IP with the second ISP.

You would also need to configure the pre-shared-key for ISP2 IP Address as well.

[majedalanni]

I will give a try and update you if it works

Thanks