how is the second packet handled differently than the first in a series of allowed interzone packets?
What needs to be configured in Phase 2 of a route-based VPN, that does not need to be configured in a policy-based VPN?