Configuring IPSec for tunnel mode