Hello,
IPsec instances do not create new network interfaces. Due to that, it is not possible to configure failover for IPsec instances. However, in case of one of the IPsec tunnel failure, there should occur a switchover to the other configuration. I recommend to prepare the configuration and test it.
Best regards,
Žygimantas