You can redistribute or migrate a tunnel that belongs to a site-to-site or Auto VPN gateway to a new processing unit. Load distribution of tunnels tears down the tunnels associated with a peer and migrates to a new tunnel anchored on a processing unit specified in the 'request security re-distribution ipsec-vpn' command.
