Only use IPSec tunnel if main gw is down

[Larsa]

@Warenbe, check out recursive nexthop lookup (aka recursive routing) that uses a gateway ping to check avilable routes: “MultiWAN with RouterOS”