Just a hunch but how long is your Phase-1 interface name via 2nd ISP?
Make sure it's not longer than 12 characters, If it then reduce it to 12
and clear bgp session. You can find out exact reason by turning on debug
for ipsec.
You are leaving our website
You are leaving our site and we cannot be held responsible for the content of external websites