Link to home
Start Free TrialLog in
Avatar of cavacamite
cavacamite

asked on

IPSEC VPN with SLA redundancy on ASA

Hello,
re: https://www.experts-exchange.com/questions/23816621/How-do-I-configure-redundant-VPN-tunnels-to-multiple-sites.html#discussion
In the firewall configuration there are two crypto maps for each outside interface. Is that necessary or can you apply the same map to both the primary and secondary interfaces?
Thank you.
ASKER CERTIFIED SOLUTION
Avatar of akalbfell
akalbfell

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of 3nerds
3nerds
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of cavacamite
cavacamite

ASKER

Thank you both very much. I didn't realize the third octet was different in the peer addresses.
I'm attempting something similar ---- there's only one remote peer, but two outside interfaces for dynamic failover.
Thank you again.