config ipsec-rule ts1
	option state off
	option name test
	option auth esp
	option ike 3DES_with_auth
	option esp 3DES_with_auth
	option pfs disable
	option dpd enable
	option dpddelay 30
	option dpdtimeout 120
	option secret_type psk
	option aggr_mode enable
	option lefthost 172.17.3.118
	option leftclient 192.168.12.0/24
	option leftid @2
	option leftnext 172.17.3.1
	option righthost 172.17.3.119
	option rightclient 192.168.10.0/24
	option rightid @2
	option rightnext %direct
	option ikelifetime 28800
	option ipseclife 3600
	option psk 1234567890
	option leftpem "/etc/ipsec.d/certs/user_cert_1.pem"
	option rightpem "/etc/ipsec.d/certs/user_cert.2.pem"
	option auto_gre_key disable
    option gre_key_in
    option gre_key_out

config ipsec-rule ts2
        option state off
        option name tunnel2
        option auth ah
        option ike 3DES_with_auth
        option esp 3DES_with_auth
        option pfs disable
        option dpd enable
        option dpddelay 30
        option dpdtimeout 120
        option secret_type psk
        option aggr_mode disable
        option lefthost 172.17.3.118
        option leftclient 192.168.12.0/24
        option leftid @2
        option leftnext 172.17.3.1
        option righthost 172.17.3.120
        option rightclient 192.168.11.0/24
        option rightid @2
        option rightnext %direct
        option ikelifetime 28800
        option ipseclife 3600
        option psk 1234567890
        option leftpem "/etc/ipsec.d/certs/user_cert_1.pem"
        option rightpem "/etc/ipsec.d/certs/user_cert.2.pem"
        option auto_gre_key disable
        option gre_key_in
        option gre_key_out
        
config ipsec-rule ts3
        option state on
        option name g1_gre
        option auth ah
        option ike 3DES_with_auth
        option esp 3DES_with_auth
        option pfs disable
        option dpd enable
        option dpddelay 30
        option dpdtimeout 120
        option secret_type psk
        option aggr_mode disable
        option lefthost 172.17.3.118
        option leftclient 11.11.11.11/32
        option leftid @2
        option leftnext 172.17.3.1
        option righthost 172.17.3.119
        option rightclient 22.22.22.22/32
        option rightid @2
        option rightnext %direct
        option ikelifetime 28800
        option ipseclife 3600
        option psk 1234567890
        option leftpem "/etc/ipsec.d/certs/user_cert_1.pem"
        option rightpem "/etc/ipsec.d/certs/user_cert.2.pem"
        option auto_gre_key enable
        option gre_key_in 0x1234
        option gre_key_out 0x5678

