thanks for your reply but that doesn’t make much sense.
starting up a tunnel and starting up the IPsec engine are different things. For example, what if I have multiple tunnels, want to shut down one of them but not the others? I need to be able to start and stop tunnels independently from the IPsec engine.