The user needs to add an extra shared keyword after the profile name on every tunnel interface that is to be shared.

switch(config)#interface Tunnel0
switch(config-if)#tunnel protection ipsec profile vrouter-ikev2-ipsec-profile shared
switch(config-if)#exit