Redundant or at least failover IPSec VPN Tunnels

or what you can do here is, use mode config, then once the site get an ip-address you can run ipip tunnel.
That would be more advanced.