Enable Tunnel 
Pass-Through

Use IPsec Security Policies to enable tunnel pass-through.

Pass-through IPv4 traffic via an IPv4 tunnel

1. Configure IPv4 allow policy for IKE protocol traffic
2. Configure IPv4 ipsec policy for media traffic
3. Configure the IKEv2 IPv4 interface with an IPv4 local address pool, or
4. Configure the RADIUS server to return a Framed-IP-Address and/or 
Framed-IP-Netmask attribute

Pass-through IPv6 traffic via an IPv6 tunnel

1. Configure IPv6 allow policy for IKE protocol traffic
2. Configure IPv6 ipsec policy for media traffic
3. Configure the IKEv2 IPv6 interface with an IPv6local address pool, or
4. Configure the RADIUS server to return a Framed-IPv6-Prefix or 
Framed-IPv6-Pool attribute

Pass-through IPv4 traffic via an IPv6 tunnel

1. Configure IPv6 allow policy for IKE protocol traffic
2. Configure IPv4 ipsec policy for media traffic
3. Configure the IKEv2 IPv6 interface with an IPv4 local address pool, or
4. Configure the RADIUS server to return a Framed-IP Address and/or 
Framed-IP-Netmask attribute

Pass-through IPv6 traffic via an IPv4 tunnel

1. Configure IPv4 allow policy for IKE protocol traffic
2. Configure IPv6 ipsec policy for media traffic
3. Configure the IKEv2 IPv4 interface with an IPv6local address pool, or
4. Configure the RADIUS server to return a Framed-IPv6-Prefix or 
Framed-IPv6-Pool attribute