using marking and VTI, map two IPsec SA's onto one VTI device.
west configure the IP address on the VTI interface, not on ethX.

The second vti address also needs to appear on the vti interface.
This currently is not happening