Case no.2: all traffic via IPSec tunnels