High availability for IPsec

You can use the new one-to-one statement at the [edit interfaces interface-name load-balancing-options high availability-options ] hierarchy level to configure one-to-one redundancy (1:1) between a pair of interfaces. If the active interface fails, the backup interface takes over. The one-to-one statement configures synchronization between the two interfaces, which creates support for IPsec connections over the redundant interfaces.