MNHA: Dynamic Routing Protocol for IPsec VPN

You can enable dynamic routing protocols for IPsec VPN in a Multinode High Availability setup by configuring node-local tunnels. To configure node-local tunnels, you must specify the set security ike gateway node-local statement in the IKE gateway configuration on both firewalls in a Multinode High Availability setup. With dynamic routing protocols, you can add and remove IP prefixes in the network and automatically redistribute the prefixes to the network peers without changing the traffic selector configuration.