VPN tunnel redundancy on CP and also on ASA-peer. Any way to achieve dual VPN on both sides?

[YuvrajMe147]

CP Checkmates,!

The setup we have in place for SITE to SITE VPN:

Star community has 2 CP Clusters defined and 1 ASA object under satellite. MEP has enabled hence the failover works fine should one of the CPs become unresponsive.

SMS/Gateways are at R80.30.

Requirement:

We need to add redundancy on the peer side as well. (Basically, one more peer needs to be added along with ASA-Main, which would be ASA-DR.)

Problem:

When we add ASA-DR, along with ASA-Main, both tunnels come up and cause an outage.
For now, we have removed the ASA-DR to keep the setup in a working state.

I am looking for any possible solutions, please. 

Thanks,
YM

[YuvrajMe147]

Is there anyone who could shed a light on this topic?

[mcatanzaro]

I’m not 100% on if this would work but am chiming in since there aren’t any responses yet. 

In my head it seems like a route based VPN could work for this setup. 

I would imagine you could set priorities on the routes for relevant traffic to prefer the primary peer.