We have an IPSEC tunnel with two encrypted end on counter part (xxx.xxx.240.16 and xxx.xxx.240.17). Both shows PH2 state as established. But to reach xxx.xxx.240.16 I've to disable xxx.xxx.240.17 policy, but xxx.xxx.240.17 is reachable with xxx.xxx.240.16 policy active. What i'm missing here?