Multichassis IPsec

Overview

Multichassis (MC) IPsec provides a stateful failover mechanism for IPsec tunnels between two 7750 SRs or 7450 ESSs in mixed mode—an active NE and a standby NE. Stateful failover enables IPsec traffic to continue being forwarded without interruption in the event of a failure. MC IPsec provides protection for NE failure or MS-ISA failure. When an active NE fails, the IPsec tunnels failover to the standby peer without having to re-establish the session. The failover mechanism can occur at the tunnel group level. A tunnel group can failover to the standby NE, independently of other tunnel groups on the active NE; see Chapter 41, MC IPsec for more information.