CRITICAL: When configuring a Phase 2 tunnel and setting P2 protocol to ESP, this setting is ignored. The GUI will show an empty value for P2 protocol and the ipsec.conf will not contain the required "esp" line.