You must configure VPN parameters and then enable the IPSEC service.

1

You must configure at least one external IP address on NSX Edge to provide IPSec VPN service.

2

You must enable the IPSec VPN service for traffic to flow from the local subnet to the peer subnet.