ipsec: don't forget to cycle the tunnel

howto/ipsec.md

@@ -293,6 +293,8 @@ is simple, just add the IP address locally again. In my case:
 
     ip a add 172.30.141.242/32 dev br0
 
+You also need to down/up the tunnel after adding that IP.
+
 Finally, never forget to "*try to turn it off and on again*". Simply
 rebooting the box can sometimes do wonders: