The cisco catalyst 8000v image does not support many features or commands out of the box in Cisco CML. (This would likely apply in EV-NG or another emulator as well.)

If you want to create IPSEC tunnels and many other features you need to enable the licensing to whatever tier(Essentials, Advantage, Premier) you need for the features required.

license boot level network-advantage addon dna-advantage

save the configuration and reload

The output of ‘show license summary’ or similar commands will likely not show any license in use within a lab environment but the commands and features should now be there.