An ES tunnel interface allows you to configure an IP Security (IPSec) tunnel between the PE and CE routers of a Layer 3 VPN. The IPSec tunnel can include one or more hops.
The following sections explain how to configure an ES tunnel interface between the PE and CE routers of a Layer 3 VPN: