The customer network includes only one NE40E. Single points of failure may occur if only one IPsec service board is installed. Can two IPsec service boards on the NE40E V600R007 chassis implement IPsec service backup?
Refer to the cases in the product document. It is found that most IPsec configurations are irrelevant to boards. The following commands are run to enable the IPsec function on service boards:
[RouterB-license] active ipsec slot 3
In normal cases, only one board is activated. In this view, multiple IPsec service boards can be activated to process IPsec services in load balancing mode.
Currently, two IPsec service boards in the NE40E V600R007 chassis fail to implement hot backup. If IPsec is configured with DPD, an IPsec tunnel is re-established upon a DPD failure and the IPsec service is restored. Before the IPsec tunnel is re-established, packet loss may occur on the live network.