HSRP on Routers

Hello Irvin

The question you’re asking in this post is unrelated with the previous HSRP question, correct? You are now trying to configure two peers under your crypto map configuration so that you can have redundancy in the creation of your IPSec VPN, correct?

In this case, yes, you’re on the right track. You can have multiple peers for redundancy in your crypto map configuration. The command set peer allows you to define the IP address of the remote IPsec peer.

Here is how you can do it:

crypto map mymap 10 ipsec-isakmp
 set peer 2.2.2.2 
 set peer 3.3.3.3

In this configuration, the peer 2.2.2.2 will be the primary, and 3.3.3.3 will be the secondary or backup peer. The IPSec VPN tunnel will always be established with the primary peer if it’s available. If the primary peer is unavailable, the secondary peer will be used.

Also note that the default keyword is not necessary in this context. The first set peer command will automatically set that peer as the default.

I hope this has been helpful!

Laz