To access the Secondary unit without changing HA Primary unit , which I would advise against if you are not sure of the VPN status run the following
execute ha manage 1
Login with the credentials
Then run
diagnose vpn ike gateway
Lists all the current VPNS
diagnose vpn tunnel stat
Check how many are up