As per my understanding site-to-site IPSec forms Tunnel only when interesting traffic is generated from actual source (say spoke towards DC) thats match ACL and RRI is used at DC end.  I want to understand is there anyway to achieve bi-direction IPSe...

I do know that IPSec works in VSAT links but I want to understand whether there any issue after implementing IPSec on VSAT link.  Issues are in terms of stability of tunnel as minimum latency on these links will be 700 ms which may increase upto 2500...

how to generate logs for packet loss using ip sla or track command