Scenario 1: distribution of IPSec tunnels