12-22-2002 09:27 PM - edited 02-21-2020 12:15 PM
Hello,
I am setting up an environment where remote IOS based IPSec peers establish tunnels to a central IOS based IPSec peer. (both running 12.2(13)T)
Is there a way the remote peer can be configured to attempt to establish a tunnel with an alternate peer (different IP address) if the preferred peer is unavailable?
Thanks in advance.
12-23-2002 01:34 PM
Hi there,
Under the crypto map, make sure that you add you set peer statements. The first set peer should be your primary peer, and the second one should be your secondary peer
Hope that helps
Jazib
12-27-2002 09:23 PM
Another way is to run IPSec between just the two external IP interfaces. Then run GRE over this, and a dynamic routing protocol, like EIGRP.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide