I agree with @cmr. However, first and foremost, bring the C9300s online individually and allow them to connect to the M.Dashboard before building the stack.
... View more
An IPsec or client VPN will always terminate on your primary WAN port. AutoVPN's can be made simultaneously on WAN1 and WAN2. However you don't have the ability to add another port to terminate VPN's separately.
... View more