@mimugmail @banymMaybe I haven't explained myself. My opnsense is connected to two lines in bgp i have no problems with HA.I need to connect to an external company that uses Cisco ASA, wants to create an IPSEC vpn and has 2 internet lines in Active / Standby. Obviously being an external company, i cannot impose an openvpn configuration (cisco asa does not support it)and firewalls normally support dual peer active / standby.@rainerle in this way I believe that opnsense tries to activate both ike, while they should be active / standby, right?