An IPsec service ACL provides a way to block IPsec connections to/from specific addresses. This feature works in a similar way to other protocols in EOS that provide this functionality.

IPSec tunnel mode support allows the customer to encrypt traffic transiting between two tunnel endpoints.

IPSec 4.27.1

IPv4 traffic can be encrypted and carried over IPSec tunnels originating or terminating on EOS dut. 

4.22.0F IPSec