Abstract: This disclosure describes systems, methods, and devices related to managing Internet Protocol Security (IPsec) for virtual private network (VPN) concentrators. A method may include: identifying, by an edge gateway backend system, a first IPsec tunnel, a second IPsec tunnel, and a third IPsec tunnel between a VPN client and a VPN concentrator of the edge gateway backend system; determining, by the edge gateway backend system, that the first IPsec tunnel is a highest priority tunnel between the VPN client and the VPN concentrator; determining, by the edge gateway backend system, that the highest priority tunnel between the VPN client and the VPN concentrator is active; and deactivating, by the edge gateway backend system, fully qualified domain names of the second IPsec tunnel and the third IPsec tunnel from the VPN concentrator based on the determination that the highest priority tunnel between the VPN client and the VPN concentrator is active.

Abstract: This disclosure describes systems, methods, and devices related to staging a universal customer edge gateway device. A universal customer edge gateway device may generate, prior to deployment of the universal customer edge gateway device at a customer location, copies of virtual network function (VNF) operating system (OS) images on the universal customer edge gateway device, the copies including a first copy of a first VNF OS image and a second copy of a second VNF OS image; identify, during a deployment of the universal customer edge gateway device at the customer location, a selection of the first copy from a list of the copies; copy, during the deployment and based on the selection, the first VNF OS image to the universal customer edge gateway device; and instantiate, at the universal customer edge gateway device, the copied first VNF OS image.