Load balancing dynamic endpoint IPsec tunnels among services interfaces

You can load-balance IPsec tunnels with dynamic endpoints among services interfaces on multiple PICs. You configure load balancing by configuring multiple next-hop IPsec service sets, each identifying services interfaces with the inside-service and outside-service statements at the [edit services service-set service-set-name next-hop-service] hierarchy level. The services interfaces in the outside-service statements of the service sets must be in the same VPN routing and forwarding (VRF) instance, and each of the service sets must include the same local-gateway and ike-access-profile values at the [edit services service-set service-set-name ipsec-vpn-options] hierarchy level.