Configure an IPSec security policy on the NE; see Step 35 in To configure a routing instance or a VRF instance.

Create an IPSec instance on a routing instance.

Perform the following steps:

1. In the navigation tree Routing view, expand Network→NE→Routing Instance.

2. Right-click on a routing instance icon and choose Properties. The Routing Instance (Edit) form opens.

3. Click on the IPSec tab and click Create. The Ipsec, (New Instance) (Create) form opens.

4. Configure the required parameters.

Configure IPsec Tunnels on the IPSec instance.

Perform Step 6 to Step 19 of To configure an IPsec tunnel on a VPRN tunnel interface.