pfSense

Setup:
IPsec Phase 1 with one or more Phase 2 entries in VTI mode. No IPsec interfaces assigned.

Issue:
While both P1 and P2 are enabled, try disabling the P1. The following error is shown:

Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

1. When clicking disable on P1, the P1 along with all its P2s should be disabled to match the behavior of non-vti P2s - as long as related IPsec interfaces are assigned.
2. The error description should say:
   

   Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P1.
   

This is related to #10190