remote ###REMOTE_IP### {
    doi ipsec_doi;
    situation identity_only;
    exchange_mode ###EXCHANGE_MODE###;
    my_identifier keyid_use "###GROUP_NAME###";
    verify_identifier off;
    peers_identifier fqdn "###FQDN###";
    certificate_type x509 "###CERT_PATH###" "###KEY_PATH###";
    verify_cert on;
    certificate_verification sec_framework use_peers_identifier;
    local_address ###LOCAL_IP###;
    nonce_size 16;
    dpd_delay ###DPD_DELAY###;
    dpd_retry 5;
    dpd_maxfail 5;
    dpd_algorithm dpd_blackhole_detect;
    initial_contact on;
    support_proxy on;
    proposal_check ###PROPOSAL_CHECK###;
    xauth_login "###XAUTH_USER###";
    mode_cfg on;
    nat_traversal on;
   
    script "###UPSCRIPT_PATH###" phase1_up;
    script "###DOWNSCRIPT_PATH###" phase1_down;
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm sha1;
        encryption_algorithm aes 256;
        lifetime time ###LIFETIME_TIME###;
        dh_group 5;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm sha1;
        encryption_algorithm aes 256;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm sha1;
        encryption_algorithm aes;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
    
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm md5;
        encryption_algorithm aes 256;
        lifetime time ###LIFETIME_TIME###;
        dh_group 5;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm md5;
        encryption_algorithm aes 256;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm md5;
        encryption_algorithm aes;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm sha1;
        encryption_algorithm 3des;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm md5;
        encryption_algorithm 3des;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm sha1;
        encryption_algorithm des;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
   
    proposal {
        authentication_method xauth_rsa_client;
        hash_algorithm md5;
        encryption_algorithm des;
        lifetime time ###LIFETIME_TIME###;
        dh_group 2;
    }
}

sainfo anonymous
{
    lifetime time 3600 sec;
    encryption_algorithm aes 128, 3des, des;
    authentication_algorithm hmac_sha1, hmac_md5;
    compression_algorithm deflate;
}
