Specifying the relevant interface in the IPSec tunnel configuration should ensure that only the specified link is used.
Stopping and starting a second link will probably cause the IPsec tunnel to be restarted, but it should come back up again on the specified link.
It never reconnects.. Always sits at "negotiating phase 1" In the IPSEC cfg, I told it the "local interface" is the "primary WAN port b", which is what I want it to use. And it does work until I enable 2nd wan.
any ideas, or can you point me to any documentation about the specifics of configuring something like this?
you will need to contact technical support so the relevant diagnostics can be viewed.