Mastership election is per tunnel-group.
MIMP is running in the base routing instance.
MIMP uses the configured value of the config>redundancy>multi-chassis>peer>source-address command as the source address. If not configured, then system address is used.
The priority range is from 0 to 255.
When an mc-ipsec tunnel-group enters standby from acting master, the tunnel-group is restarted.
When a tunnel-group enters an admin shutdown state under the mc-ipsec configuration (add a tunnel-group to mc-ipsec configuration, or upon admin shutdown of an mc-ipsec enabled tunnel group):
All tunnels in the tunnel-group are deleted/reinstalled to the ISA.
All IKE states associated with those tunnels are locally purged from the MS-ISAs.
No IKE messages are sent to the IKE peer.
These behaviors occur regardless of the presence of a redundant chassis or the state of a redundant chassis.
With MC-IPsec enabled:
auto-establish is blocked.
For DPD configuration, only no dpd and dpd configurations with reply-only are allowed.