To add an IPsec tunnel

1. Sign in to the Flex Appliance Console as an administrator.
2. On the System topology page, under Application instances, select the application instance for which you want to set up the IPsec tunnel.
3. Select the IPsec tab.
4. Click Add IPsec tunnel.
5. Enter the tunnel details.

   See IPsec tunnel fields.

   Note:

   Select the IKE and ESP algorithms only from the FIPS/STIG-recommended list that the appliance provides.

   See Supported IKE and ESP algorithms.

6. Generate a pre-shared key (PSK) on the appliance, or enter a PSK that has already been generated elsewhere.
7. Click Save.

   Note:

   If the PSK was generated on the appliance, copy it now. After you save the tunnel, the appliance does not display the PSK again.

8. If the other site has not yet been configured, click Copy details to copy the tunnel profile (excluding the PSK) and provide the copied details, along with the PSK, to the administrator responsible for the other site so that they can configure a matching tunnel.
9. Bring the application instance back online.

   Note:

   If you are configuring the non-Flex managed second site of the tunnel (that is, the other site's tunnel is already configured and waiting), you may need to run a command to initiate the tunnel rather than waiting for it to come up automatically.