Block IPSEC site2site in my lab.

[fishy]

Playing with site2site VPN - ipsec in my lab env.Both WAN addresses are on my main network

WAN1 = 192.168.1.31
WAN2 = 192.168.1.32

The tunnel works fine, the problem is the break it!
I have tried to block ISAKMP, and the ESP protocol on the WAN interface and still I am able to connect without any issues. Only way to break it is to shutdown one site. :-)