[Contents][Prev][Next][Index][Report an Error]

Configuring ES PIC Redundancy

You can configure ES PIC redundancy on M-series and T-series routing platforms that have multiple ES PICs. With ES PIC redundancy, one ES PIC is active and another ES PIC is on standby. When the primary ES PIC has a servicing failure, the backup becomes active, inherits all the tunnels and SAs, and acts as the new next hop for IPSec traffic. Reestablishment of tunnels on the backup ES PIC does not require new Internet Key Exchange (IKE) negotiations. If the primary ES PIC comes online, it remains in standby and does not preempt the backup. To determine which PIC is currently active, use the show ipsec redundancy command.

Note: ES PIC redundancy is supported on M-series and T-series routing platforms.

To configure an ES PIC as the backup, include the backup-interface statement at the [edit interfaces fpc/pic/port es-options] hierarchy level:




backup-interface es-fpc/pic/port;

[Contents][Prev][Next][Index][Report an Error]