I have an OpenVPN L2 bridge that fails to come up on reboot because it depends on an IPSec tunnel. The configuration works if I log in and do a configure, load, commit.
Relevant config parts,
openvpn vtun1 { bridge-group { bridge "br0" cost "100" } description "LAN_TVBox Tunnel" device-type "tap" local-host "10.255.2.1" local-port "1194" mode "site-to-site" openvpn-option "fragment 1392" openvpn-option "mssfix" openvpn-option "auth none" openvpn-option "cipher none" persistent-tunnel { } remote-host "10.255.2.0" shared-secret-key-file "/config/auth/ovpn/tvbridge.key" } vti vti1 { address "10.255.2.1/31" description "TUN_******" mtu "1426" traffic-policy { out "PRIO_OUT" } }