Configuring Required Routing-Based VPN Components Overview
A route-based VPN requires two components:
Tunnel interface or zone
Route (static or dynamic)
For VPNs created with VPN Manager, you create the VPN first to autogenerate the tunnel interfaces, and then create the routes on the device itself using those tunnel interfaces. For VPNs created at the device level, you can create the tunnel interfaces and routes before or after configuring the VPN.