This configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization.

Peer IDs are unencrypted and exposed, creating a security risk.

FortiGate will not add a route to its routing or forwarding information base when the dynamic tunnel is negotiated.

A separate interface is created for each dial-up tunnel, which can be slower and more resource intensive, especially in large networks.