FW-MACS: Active IPsec VPN tunnels