Am 31.12.2018 um 15:38 schrieb John Antypas:

I had not done anything special with the ipsec tunnel, so it probably isn't.,   WE had assumed since traffic was passed, all was well.  We were seeing the BGP updates.    We could set up a GRE tunnel between the two sites or GIF (which one would you recommend?)   We had thought of that because our first attempt was to use OSPF which didn't traverse the IPSEC link.

The enc interface in FreeBSD is not a routed device so you have to create a tunnel interface (GRE preferred) or use route-based IPSEC. Michael