This image shows the NSX-based IPSec VPN connection with one tunnel. There are two boxes, a customer on premises and Oracle Cloud region. NSX-T supports layer 3 and layer 2 IPSec tunnels from on premises to Oracle Cloud.