set vpn ipsec esp-group esp01 lifetime '1800'
set vpn ipsec esp-group esp01 mode 'tunnel'
set vpn ipsec esp-group esp01 pfs 'dh-group19'
set vpn ipsec esp-group esp01 proposal 10 encryption 'aes128'
set vpn ipsec esp-group esp01 proposal 10 hash 'sha512'
set vpn ipsec ike-group IKEv2_01 key-exchange 'ikev2'
set vpn ipsec ike-group IKEv2_01 lifetime '10800'
set vpn ipsec ike-group IKEv2_01 proposal 10 dh-group '19'
set vpn ipsec ike-group IKEv2_01 proposal 10 encryption 'aes256'
set vpn ipsec ike-group IKEv2_01 proposal 10 hash 'sha512'

set vpn ipsec site-to-site peer vpn_03 authentication local-id '10.110.2.62'
set vpn ipsec site-to-site peer vpn_03 authentication mode 'pre-shared-secret'
set vpn ipsec site-to-site peer vpn_03 authentication remote-id '10.110.1.59'
set vpn ipsec site-to-site peer vpn_03 ike-group 'IKEv2_01'
set vpn ipsec site-to-site peer vpn_03 local-address '10.110.2.62'
set vpn ipsec site-to-site peer vpn_03 remote-address '10.110.1.59'
set vpn ipsec site-to-site peer vpn_03 tunnel 0 esp-group 'esp01'
set vpn ipsec site-to-site peer vpn_03 tunnel 0 local prefix '10.110.10.0/24'
set vpn ipsec site-to-site peer vpn_03 tunnel 0 protocol 'all'
set vpn ipsec site-to-site peer vpn_03 tunnel 0 remote prefix '10.120.10.0/24'