how to disable a VPN tunnel - Site-to-Site

[Diego Maciel Gomes]

Hello all!

I want to know how to make a VPN disable.

I have a VPN configured and working fine. But, I needed to create a second VPN for the same company, just for backup, so, in that case, I have a different peer.

That backup VPN, I want to configure it, but, Im looking for a way to make it disable. For example, we can disable an ACL, we can disable a NAT... How to disable a VPN?

The idea is, when I need to make backup works, I just make it Enable, something like this.

Thanks,

Diego

[Marvin Rhoads]

You can just add a secondary peer address if all other parameters are the same. That way when the primary goes down, the VPN will automatically establish to the secondary with no manual intervention required. Something like:

crypto map VPNMAP 10 set peer 1.1.1.1 2.2.2.2

You will also need to have a tunnel-group for each peer with the same PSK set.