phase 1 Setup tunnel peers for shared key and authentication and to encrypt phase 2 phase 2 setup encryption of interesting traffic ipsec set lan info and encryption monitor security associations and validate encapsulations and encapsulations