Policy-based configuration of internet protocol security for a virtual private network

A network device comprising

• a non-transitory storage device having embodied therein one or more routines operable to facilitate policy-based configuration of Internet Protocol Security (IPSec) for a Virtual Private Network (VPN) connection;
• and
• one or more processors coupled to the non-transitory storage device and operable to execute the one or more routines, where
• the one or more routines cause a policy page to be displayed to a network administrator via a user interface of the network device through which a policy, including a plurality of VPN settings for establishing the VPN connection, is viewed and configured, the plurality of VPN settings including a type of IPSec tunnel to be established between the network device and a peer network device;
• the one or more routines receiving, via the user interface, a selection regarding the type of IPSec tunnel to be used for the VPN connection;
• and
• the one or more routines requesting the VPN connection be established between the network device and the peer network device in accordance with the policy by sending a notification request, including parameter values associated with the plurality of VPN settings, from the network device to the peer network device.