At this time, is there any way to ensure that the SQL Server transaction log backup process performed after the image-based backup is always performed only from the secondary node?
When the job is processing an Always On Availability Group, Veeam Agent for Windows needs to select one node from which the logs will be transferred. The selection is done based on a several criteria, and one of them - backup preferences. More details regarding this topic you can find here.