The IP Manager discovers IPSec tunnels and Internet Key Exchange (IKE) tunnels between IPSec-enabled routers on IPv4 networks. It uses Router, Interface, and IP object types to model the tunnels.

During a full discovery, the IP Manager reads the Routing Table of IPSec-enabled routers to discover the terminating subinterfaces (WAN endpoints) of IPSec tunnels and IKE tunnels. The IP Manager layers the subinterfaces over the underlying physical interfaces and creates the network connections between the local and remote subinterfaces to form the IPSec and IKE tunnels.

By default, the IP Manager is not enabled to discover IPSec tunnels.

Refer the VMware Smart Assurance IP Manager User Guide on how to enable IPSec tunnel discovery and also on how to modify parameters in the tpmgr-param.conf, discovery.conf, and the runcmd_env.sh files.