This feature is enabled by adding private IPsec interface in MLD configuration, for example
config>service>vprn
mld
interface "priv"
no shutdown
exit
no shutdown
exit
interface "priv" tunnel create
ipv6
address 2001:dead::1/96
exit
sap tunnel-1.private:200 create
exit
exit
The MLD configuration under the private interface level is ignored by the system.