Drop IPsec packets when interface is down

No match.