There appears to be conflicting guidance on the configuration of
VRF-aware IPsec in versions 7.2.x and above. Traditionally, in a
multi-virtual domain (VDOM) setup, the root VDOM is designated as VRF 0
and is utilized for route leaking to the interne...