EOS provides support for the use of IPsec to establish and maintain IPsec tunnels.  Currently EOS supports only route based IPsec tunnels - i.e traffic is routed through the tunnel only if there are routes in the FIB pointing to the IPsec tunnel as the next-hop.

TOI IPSec EOS 4.33.1F Policy based VPN