You can get more detail about the tunnel using the command below. i.e.
What parts of that config are actually used, what level of offloaded
(enc/dec) NP, CP.# diagnose vpn tunnel list name (If you
post here be sure to obfuscate the IP's, etc.) There...