IKEv1 mesh selectors are used with IKEv1 static configurations with the phase2 using address group name selectors. When the mesh selector type is set to either host or subnet, and a phase2 is configured with multiple source and destination addresses, this configuration acts as the template selector.

When traffic hits the tunnel in host mode, a dynamic selector is installed for the specific source and destination IP addresses of that packet. When traffic hits the tunnel in subnet mode, a dynamic selector is installed for the specific address of the address group that matched the packet.

These dynamic selectors are not saved to the configuration and will be removed when tunnels are flushed.