Second VPN into Verizon Private IP network

[ashley]

Is there a way to hold a tunnel down until the primary tunnel goes down.? I have two tunnels into my PIP network at different locations from the same device. Both tunnels come up and BGP comes up. But even with AS prepending the second tunnel is screwing up routing PIP wide. Is there a way to hold the second backup tunnel down until needed in the event that the primary tunnel goes down? Any other solutions? Thanks

[emnoc]

Just some food for thought.... You might want to weigh routes via a dynamic routing protocol. You could probably get away with the same concept and install " weight" for static route and interface-mode, but I ' ve never done this. e.g config router static edit 11 set device " tunnel1" set dst 192.168.111.0 255.255.255.0 set priority 0 set weight 0 next edit 12 set device " tunnel2" set dst 192.168.111.0 255.255.255.0 set priority 0 set weight 50 next Running a routing protocol like OSPF or even worst; " RIP " , will allow you to favor routes via metric or hop-adjustment for routes learned over the tunnel interfaces. It will require interface-mode vpns.

[ashley]

I am using BGP and do not want the second tunnel up until there is a need for it.

[Carl_Wallmark]

Try " set monitor" under config vpn ipsec phase1-interface from CLI: monitor IPsec interface to backup.

[ashley]

Just did, it only appears you can go OUT two ISPs, not into two. The remote gw must be the same using monitor-phase1