No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FAQ-Can Two IPsec Service Boards on the NE40E V600R007 Chassis Implement IPsec Service Backup?

Publication Date:  2019-04-24 Views:  67 Downloads:  0

Issue Description

The customer network includes only one NE40E. Single points of failure may occur if only one IPsec service board is installed. Can two IPsec service boards on the NE40E V600R007 chassis implement IPsec service backup?

Solution

Refer to the cases in the product document. It is found that most IPsec configurations are irrelevant to boards. The following commands are run to enable the IPsec function on service boards:

[RouterB] license

[RouterB-license] active ipsec slot 3

[RouterB-license] quit

In normal cases, only one board is activated. In this view, multiple IPsec service boards can be activated to process IPsec services in load balancing mode.

Currently, two IPsec service boards in the NE40E V600R007 chassis fail to implement hot backup. If IPsec is configured with DPD, an IPsec tunnel is re-established upon a DPD failure and the IPsec service is restored. Before the IPsec tunnel is re-established, packet loss may occur on the live network.

END