The operational command show vpn ipsec connections shows only one tunnel as UP. Whichever tunnel is loaded last, that tunnel is shown as up.
Sending traffic also doesn't make any difference.
vyos@vyos# run sh vpn ipsec connections Connection State Type Remote address Local TS Remote TS Local id Remote id Proposal ---------------- ------- ------ ---------------- --------------- --------------- ---------- ----------- ------------------------------------- remote1 down IKEv2 1.2.3.4 - - 1.2.3.4 - remote1-tunnel-0 down IPsec 1.2.3.4 192.168.99.2/32 192.168.99.1/32 1.2.3.4 - remote2 up IKEv2 1.2.3.5 - - 1.2.3.5 AES_CBC/256/HMAC_SHA2_256_128/ECP_521 remote2-tunnel-0 up IPsec 1.2.3.5 192.168.99.2/32 192.168.99.3/32 1.2.3.5 AES_CBC/256/HMAC_SHA2_256_128/None [edit] vyos@vyos# run sh vpn ipsec sa Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal ---------------- ------- -------- -------------- ---------------- ---------------- ----------- ----------------------------- remote1-tunnel-0 up 15m26s 1K/1K 19/19 1.2.3.4 1.2.3.4 AES_CBC_256/HMAC_SHA2_256_128 remote2-tunnel-0 up 15m26s 0B/0B 0/0 1.2.3.5 1.2.3.5 AES_CBC_256/HMAC_SHA2_256_128 vyos@vyos# sudo swanctl -l remote2: #2, ESTABLISHED, IKEv2, bd540d0a31d55f9f_i* 4d134218c45dac62_r local '1.2.3.3' @ 1.2.3.3[4500] remote '1.2.3.5' @ 1.2.3.5[4500] AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_521 established 975s ago, rekeying in 27156s remote2-tunnel-0: #2, reqid 2, INSTALLED, TUNNEL, ESP:AES_CBC-256/HMAC_SHA2_256_128 installed 975s ago, rekeying in 2625s, expires in 2625s in c60737ef, 0 bytes, 0 packets out cd25f7dc, 0 bytes, 0 packets local 192.168.99.2/32 remote 192.168.99.3/32 remote1: #1, ESTABLISHED, IKEv2, 2c3f98ad856b2e0c_i* c661cd025f731e12_r local '1.2.3.3' @ 1.2.3.3[4500] remote '1.2.3.4' @ 1.2.3.4[4500] AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_521 established 975s ago, rekeying in 25385s remote1-tunnel-0: #1, reqid 1, INSTALLED, TUNNEL, ESP:AES_CBC-256/HMAC_SHA2_256_128 installed 975s ago, rekeying in 2625s, expires in 2625s in ce2acb92, 5628 bytes, 67 packets, 1s ago out c0c69888, 5628 bytes, 67 packets, 1s ago local 192.168.99.2/32 remote 192.168.99.1/32 [edit] vyos@vyos# sudo swanctl -L remote1: IKEv2, no reauthentication, rekeying every 28800s, dpd delay 30s local: 1.2.3.3 remote: 1.2.3.4 local pre-shared key authentication: remote pre-shared key authentication: id: 1.2.3.4 remote1-tunnel-0: TUNNEL, rekeying every 3600s, dpd action is clear local: 192.168.99.2/32 remote: 192.168.99.1/32 remote2: IKEv2, no reauthentication, rekeying every 28800s, dpd delay 30s local: 1.2.3.3 remote: 1.2.3.5 local pre-shared key authentication: remote pre-shared key authentication: id: 1.2.3.5 remote2-tunnel-0: TUNNEL, rekeying every 3600s, dpd action is clear local: 192.168.99.2/32 remote: 192.168.99.3/32