i have a similar situasion. I have 2 nics per san for iscsi traffic and 2 (bond) for lan. What im plannig to do, is assign 1 of the iscsi ports per san a "SAN" ip address which i will use for communication between the boxes for replication. I will place the ping node on this subnet.
Then conf VIP on both iscsi nics on different networks to each other and the "SAN" repl ip.
I do get that if that san nic cable goes it will trigger a failover, but this is how i understand open-e want you to configure it.
I started typing an answer and as I typed, I realized I had additional questions for Open-E regarding when the software *thinks* it needs to failover/failback.
Since Open-E requires a min of two aux interfaces, what role do they play in determining when to failover? What happens if the ping node is down but the auxs are up? What happens if the reverse is true?