There are five MIMP states:
discovery
notEligible
eligible
standby
master
The five MIMP states are described as follows:
Upon enabling MC-IPsec for the tunnel-group, for example:
system starts up
no shutdown MC-IPsec peer
no shutdown MC-IPsec tunnel-group
Functionally, this means blackhole traffic to the ISA and no shunting.
If the peer is reached before the discovery-interval (configurable) has expired, then the state is changed to whatever the MIMP decides
If the peer is not reached before the discovery-interval has expired, then the state is changed to eligible or notEligible depending on the oper-status of the tunnel-group.
notEligible
The tunnel-group is operationally down. Functionally, this means blackhole traffic to the ISA and no shunting.
eligible
The peer is not reachable or the associated BFD session is down but the tunnel-group is operationally up. Functionally, this means the ISA processes traffic.
standby
Peer is reachable, elected standby. Functionally, this means blackhole traffic to ISA and shunting if possible.
master
Peer is reachable, elected master. Functionally, this means the ISA processes traffic.