Yes to question one. If you run the newer beta you'll even get better logging where the SA's will be mapped to the correct traffic selectors. Question two well you can have multiple VLANs but it's not true IPsec so I don't think it actually works with phases and negotiations. Everything is rather orchestrated with the cloud.
... View more
