Inter-chassis ISA redundancy

In case that an active ISA fails in a nat-group, the standby ISA takes over the reassembly function. However, the switchover is not stateful and consequently traffic destined for the failed ISA is lost until it is restarted.