To perform an MC IPsec switchover

Purpose

Perform this procedure to perform a manual switchover from an MC IPsec tunnel group and from all of the associated IPsec tunnels that are configured above the MC IPsec tunnel group.

Steps
 
1 

Choose Manage→Redundancy→Node Redundancy from the NFM-P main menu. The Manage Node Redundancy form opens.

2 

Choose MC IPSec Group (Multi-Chassis) from the drop-down menu and click Search. A list of MC IPSec groups is displayed.

3 

Select an MC IPsec group and click Properties. The MC IPSec Group (Edit) form opens.

4 

Click on the Components tab.

5 

Right-click on a site object below the MC IPsec Group object and choose Properties. The MC IPsec Tunnel Group (Edit) form opens.

6 

Perform one of the following:

  1. If the Last Tunnel Group Switch Status indicator in the Protection Status panel reads Nominal, click Protection Switch.

  2. When the Last Tunnel Group Switch Status in the Protection Status panel for the group is Not Ready, you cannot perform the switchover.

    This is due to one of the following:

    • there is no elected standby peer

    • the synchronization of pending IPsec states must occur

    • IKE states are pending download to ISAs

7 

Close the MC IPSec Tunnel Group (Edit) form.

8 

Close the MC IPSec Group (Edit) form.

9 

Close the Manage Node Redundancy form.

End of steps