IPsec provides a standards-based VPN implementation compatible with other IPsec implementations. The IPsec subsystem in TNSR is handled by strongSwan.

For site-to-site usage, TNSR supports route-based IPsec, which allows BGP or static routes to send traffic through IPsec.

For remote access IPsec (also known as “Mobile IPsec”), TNSR currently supports IKEv2 with EAP-TLS, EAP-RADIUS, or PSK.