> For the complete documentation index, see [llms.txt](https://docs.cloudeka.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudeka.ai/guideline-for-individual/deka-vpn/configuration-deka-vpn-ipsec/ipsec-tunnel/add-phase-2.md).

# Add Phase 2

Phase 2 in IPSec is used to define which traffic (subnet or network) will be encrypted and transmitted through the VPN tunnel. There are steps to add Phase 2:

* Go to the **VPN** list table, then click **More → Configuration** on the selected VPN.

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/GfncFOFrR96mWfhm1JZI/image.png" alt=""><figcaption></figcaption></figure>

* In the **IPSec** tab, scroll down to the **IPSec Tunnel** section. Click the **Add Phase 2** button.

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/kuZcoY8xO1jwSWWntIsK/image%20(3).png" alt=""><figcaption></figcaption></figure>

* Fill in the required information:

<table><thead><tr><th width="160.66668701171875">Column</th><th>Description</th></tr></thead><tbody><tr><td><strong>Remote Subnet</strong></td><td>The destination subnet configured to connect with the VPN.</td></tr><tr><td><strong>Network Size</strong></td><td>The subnet mask (e.g., /24, /16) that defines the size of the network.</td></tr><tr><td><strong>Description</strong></td><td>Additional information or notes related to the configuration.</td></tr></tbody></table>

* Click **Create** to save the configuration.

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/WlAqkj6G2RiZkWopDhNP/image%20(4).png" alt=""><figcaption></figcaption></figure>

* The system will display a notification stating **“IPSec Phase 2 has been successfully created."**

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/xFtV9zExlnYb37zKGFcc/image%20(5).png" alt=""><figcaption></figcaption></figure>

* To check if IPSec Phase 2 has been successfully added, click the **More** button and then select **IPSec Phase 2**.

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/3x6ggNFrC206xq9Ao9EL/image%20(6).png" alt=""><figcaption></figcaption></figure>

* The IPSec Phase 2 window shows the list of existing Phase 2 configurations along with their details.

<figure><img src="https://content.gitbook.com/content/dRGHNSPw8ps5rkLJZT3A/blobs/J0CnKwPlUglcaHts0yZG/image%20(8).png" alt=""><figcaption></figcaption></figure>