Merge pull request #3157 from c-po/vti-T6085
vti: T6085: interface is always down and only enabled by IPSec daemon