Is it possible to add support for additional policies with the same source, destination, protocol, direction, and method for situations where you have more than one tunnel (to the same network) for redunancy?
With Amazon VPC you have two tunnels. A tunnel can go down during maintenance, or because of an error. When this happens the second tunnel should take over. Therefor an extra policy is required, but is currently not supported by ipsec.
The problem is described here:
Whats the verdict? :)