tunnel
Tunnel ID.
Syntax
When this parameter is used, the scope of the rule changes from system access control to tunnel access control. A rule which contains this parameter does not permit or deny traffic like a normal rule, but simply directs the traffic through an IPSec tunnel.
Consequently, traffic which matches a rule with a tunnel ID must also be permitted by another filter rule in order to be allowed into or out of the system.