Idea here is to have underlay network running in a vrf often called fvrf or front door vrf. In these designs a transport front vrf is created and the wan interfaces are placed in the transport vrf. Configure ikev2 and ipsec 10.