Configuring IPsec for tunnels