ipsec: change check if a ikev2 tunnel is up.