For a redundant configuration, you could specify many peers in your crypto map, each with a different IP address: R1 (config)# crypto map MYMAP 10 ipsec-isakmp R1 (config-crypto-map)# match ip address 122 R1 (config-crypto-map)# set peer 30.200.200.2 R1 (config-crypto-map)# set peer 30.200.201.2 R1 (config-crypto-map)# set peer 30.200.202.2 In this configuration, R1 would first attempt to create an IPSec session with 30.200.200.2. If this router is unavailable or an error occurs during IKE, then the next router on the list is attempted, which is 30.200.201.2, and so on until an IPSec session is established. |