### Autogenerated by vpn_ipsec.py ###

connections {
    peer_peer-ip-2 {
        proposals = aes256gcm128-sha256-ecp256
        version = 2
        local_addrs = peer-ip-1 # dhcp:no
        remote_addrs = peer-ip-2
        dpd_timeout = 120
        dpd_delay = 30
        rekey_time = 10800s
        mobike = no
        keyingtries = 1
        local {
            id = "peer-ip-1"
            auth = psk
        }
        remote {
            id = "peer-ip-2"
            auth = psk
        }
        children {
            peer_peer-ip-2_vti {
                esp_proposals = aes256gcm128-sha256-ecp256
                life_time = 3600s
                local_ts = 0.0.0.0/0,::/0
                remote_ts = 0.0.0.0/0,::/0
                updown = "/etc/ipsec.d/vti-up-down vti0"
                                                if_id_in = 1
                if_id_out = 1
                ipcomp = no
                mode = tunnel
                start_action = trap
                dpd_action = start
            }
        }
    }

    peer_peer-ip-3 {
        proposals = aes256-sha256-ecp256
        version = 2
        local_addrs = peer-ip-1 # dhcp:no
        remote_addrs = peer-ip-3
        dpd_timeout = 120
        dpd_delay = 30
        rekey_time = 3600s
        mobike = no
        keyingtries = 0
        local {
            auth = psk
        }
        remote {
            id = "peer-ip-3"
            auth = psk
        }
        children {
            peer_peer-ip-3_vti {
                esp_proposals = aes256-sha256-ecp256
                life_time = 28800s
                local_ts = 0.0.0.0/0,::/0
                remote_ts = 0.0.0.0/0,::/0
                updown = "/etc/ipsec.d/vti-up-down vti01"
                                                if_id_in = 2
                if_id_out = 2
                ipcomp = no
                mode = tunnel
                start_action = start
                dpd_action = start
            }
        }
    }

}

pools {
}

secrets {
    ike_peer-ip-2 {
        id-local = peer-ip-1 # dhcp:no
        id-remote = peer-ip-2
        id-localid = peer-ip-1
        id-remoteid = peer-ip-2
        secret = "Q8eLu}XRE[IwRmKn-k2$"
    }
    ike_peer-ip-3 {
        id-local = peer-ip-1 # dhcp:no
        id-remote = peer-ip-3
        secret = "jYNdiDe3t89E5eWEsXGfiCryXqHEZDMd"
    }
}