Hello,

Looking for more detailed info on IPsec VPN failover group on ER8411 router - manual is pretty sparse.  Goal is if primary WAN VPN goes down, secondary WAN VPN activates.

As far as the destination site router, assuming I'd need to have it on the same firmware and failover configured similarly to function? 

Currently the destination site router on the old firmware, and has to have a unique subnet for each IPsec policy.

It seems this newest firmware allows two different IPsec policies with the same subnet to be active simultaneously?  Would this provide redundancy, or cause errors?

Thank you for any information in advance.