This is my first post here, so tell me if there's something I'm doing wrong.
I'm currently working with another IT student on our end of degree project and we're building our network in PT. Our current design has 2 LANS that are remotely connected using an IPSec tunnel. Each LAN has 2 routers configured using HSRP. The IPSec tunnel is only configured from the "main" (or rather "active") router in each LAN, therefore, should one of the "main" routers fail, then the 2 LANs would be disconnected. That is not something we can afford, since we'll have Oracle Streams replicating a DB over the IPSec tunnel.
So, my question is, how should we proceed in order to configure a IPSec tunnel that doesn't "die" when a router is down?
Our current idea consists in making a tunnel for each router-to-router connection, making a total of 4 tunnels, but we are unsure whether that's a good practice(probably not) or if its even possible.