First steps

You will need either the public IP address, or DNS hostname of the device, to use as the IKE ID:

Use the public (egress) IP address of the edge device as the IKE ID if the public IP address is static.
Use the DNS hostname (FQDN) of the device, with IKEv2, if your device has a dynamic IP address.

If you are a hybrid customer, contact Technical Support to obtain a login to the cloud portal. See Using IPsec with the hybrid service.

The configuration process is covered step-by-step in Tunnel configuration.

See Recommended settings and best practices, for details of the recommended and supported device configuration settings for IPsec Advanced. The section also details device configuration best practices.