Device Level AutoKey IKE VPN: Using Routes Configuration Overview
For a routing-based VPN member, you must configure:
Tunnel zone or tunnel interfaces on the member.
Static or dynamic routes from the member to other VPN members.
VPN traffic flows through the tunnel zones or tunnel interfaces on the security device, and uses static or dynamic routes to reach other VPN members. You must create the tunnel zones and interfaces before configuring routes.
For details on configuring tunnel zones, tunnel interfaces, static routes, or dynamic routes, see Configuring Virtual Routers.
After you have configured the tunnel zone or interface on the security device, you must bind the VPN to that zone or interface to make the VPN functional.