08-10-2011 06:59 AM
We have a site to site VPN connection with a remote network and want to know if there is anyway to configure a secondary peer IP address that the VPN would use to connect in case the primary became unavailable
Solved! Go to Solution.
08-10-2011 07:37 AM
Configuring Backup peer for vpn tunnel on same crypto map
Problem
You want to use multiple backup peers for a single vpn tunnel.
Solution
Configuring multiple peers is equivalent to providing a fallback list. For each tunnel, the security appliance attempts to negotiate with the first peer in the list.
If that peer does not respond, the security appliance works its way down the list until either a peer responds or there are no more peers in the list.
The ASA should have a crypto map already configured as the primary peer. The secondary peer could be added after the primary one.
This example configuration shows the primary peer as X.X.X.X and backup peer as Y.Y.Y.Y:
ASA(config)#crypto map mymap 10 set peer X.X.X.X Y.Y.Y.Y
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#addbackup
HTH
If helpful rate
Sent from Cisco Technical Support iPhone App
08-10-2011 07:37 AM
Configuring Backup peer for vpn tunnel on same crypto map
Problem
You want to use multiple backup peers for a single vpn tunnel.
Solution
Configuring multiple peers is equivalent to providing a fallback list. For each tunnel, the security appliance attempts to negotiate with the first peer in the list.
If that peer does not respond, the security appliance works its way down the list until either a peer responds or there are no more peers in the list.
The ASA should have a crypto map already configured as the primary peer. The secondary peer could be added after the primary one.
This example configuration shows the primary peer as X.X.X.X and backup peer as Y.Y.Y.Y:
ASA(config)#crypto map mymap 10 set peer X.X.X.X Y.Y.Y.Y
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#addbackup
HTH
If helpful rate
Sent from Cisco Technical Support iPhone App
08-10-2011 08:14 AM
Thanks.. 2 more quick questions.. is this supported in v8.2? and do I need a sepeate tunnel group for the second peer (I assume I do)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide