Dual VPN's question

Hi all,

I am adding an SDWan overlay onto remote sites, and so I had hoped to build a secondary VPN ipsec tunnel and add to the SDWan zone, and then shut the original tunnel and bring up the new.

Both tunnels are therefore using the same ISP, to the same destination core site.  Both have different passwords and different ike versions

My problem is that, the new tunnel will not connect to the core at all.  I see no port 500 connections even being initiated.

I cannot understand why the new one won't even attempt to reach the core, even if I disable to original VPN interface