Multiple peer addresses in DPD configuration with iked process

When your firewall runs the iked process for the IPsec VPN service, the IKE connection supports multiple peer addresses per gateway, ensuring DPD failover. You must configure the deadpeer-detection option at the [edit security ike gateway gateway-name ] hierarchy level before configuring multiple peer addresses. You can use the address option at the same hierarchy level to configure multiple peer addresses. Note the following behavior with the DPD failover feature: 

• You can configure one active peer and up to four backup peer addresses. 
• If the first peer address, which is the active peer, is not reachable, the IKE protocol negotiates with the next available peer based on the order of peer address configuration. You'll notice traffic disruption when DPD failover is in progress with the current active peer unreachable.