Review the following limitations associated with Fabric Extend:
Only pre-shared authentication key IPsec parameters are user configurable. Other, third-party solutions are not configurable.
Supports IKEv2 protocol key exchange only.
IPsec support is only added for Fabric Extend tunnels.
IPsec is not supported for regular Layer 3 routed packets.