IPsec cleanup when local gateway address

You can enable an IPsec tunnel's service set to stop sending IKE triggers when the tunnel's local gateway IP address goes down or the MS-MIC or MS-MPC being used in the tunnel's service set goes down. In addition, when the local gateway IP address goes down, the IKE and IPsec security associations (SAs) are cleared for next-hop service sets, and go to the Not Installed state for interface-style service sets. The SAs that have the Not Installed state are deleted when the local gateway IP address comes back up.