set interfaces ethernet eth0 address '203.0.113.1/30' set interfaces ethernet eth1 address '198.51.100.1/30' set interfaces loopback lo set interfaces tunnel tun0 address '192.168.0.1/30' set interfaces tunnel tun0 encapsulation 'ipip' set interfaces tunnel tun0 local-ip '203.0.113.1' set interfaces tunnel tun0 multicast 'disable' set interfaces tunnel tun0 remote-ip '203.0.113.254' set interfaces tunnel tun1 address '192.168.1.1/30' set interfaces tunnel tun1 encapsulation 'ipip' set interfaces tunnel tun1 local-ip '203.0.113.1' set interfaces tunnel tun1 multicast 'disable' set interfaces tunnel tun1 remote-ip '198.51.100.254' set interfaces tunnel tun2 address '192.168.2.1/30' set interfaces tunnel tun2 encapsulation 'ipip' set interfaces tunnel tun2 local-ip '198.51.100.1' set interfaces tunnel tun2 multicast 'disable' set interfaces tunnel tun2 remote-ip '203.0.113.254' set interfaces tunnel tun3 address '192.168.3.1/30' set interfaces tunnel tun3 encapsulation 'ipip' set interfaces tunnel tun3 local-ip '198.51.100.1' set interfaces tunnel tun3 multicast 'disable' set interfaces tunnel tun3 remote-ip '198.51.100.254' set interfaces vti vti0 address '10.0.0.2/31' set interfaces vti vti0 description 'Tunnel to 192.168.0.2' set interfaces vti vti1 address '10.1.1.2/31' set interfaces vti vti1 description 'Tunnel to 192.168.1.2' set interfaces vti vti2 address '10.2.2.2/31' set interfaces vti vti2 description 'Tunnel to 192.168.2.2' set interfaces vti vti3 address '10.3.3.2/31' set interfaces vti vti3 description 'Tunnel to 192.168.3.2' set protocols static route 0.0.0.0/0 next-hop 198.51.100.2 distance '2' set protocols static route 0.0.0.0/0 next-hop 203.0.113.2 set protocols static table 100 route 0.0.0.0/0 next-hop 203.0.113.2 set protocols static table 101 route 0.0.0.0/0 next-hop 198.51.100.2 set system host-name 'r1' set vpn ipsec esp-group group-ESP compression 'disable' set vpn ipsec esp-group group-ESP lifetime '3600' set vpn ipsec esp-group group-ESP mode 'tunnel' set vpn ipsec esp-group group-ESP pfs 'dh-group19' set vpn ipsec esp-group group-ESP proposal 10 encryption 'aes256gcm128' set vpn ipsec esp-group group-ESP proposal 10 hash 'sha256' set vpn ipsec ike-group group-IKE close-action 'none' set vpn ipsec ike-group group-IKE dead-peer-detection action 'hold' set vpn ipsec ike-group group-IKE dead-peer-detection interval '30' set vpn ipsec ike-group group-IKE dead-peer-detection timeout '120' set vpn ipsec ike-group group-IKE ikev2-reauth 'no' set vpn ipsec ike-group group-IKE key-exchange 'ikev2' set vpn ipsec ike-group group-IKE lifetime '28000' set vpn ipsec ike-group group-IKE mobike 'disable' set vpn ipsec ike-group group-IKE proposal 10 dh-group '19' set vpn ipsec ike-group group-IKE proposal 10 encryption 'aes256gcm128' set vpn ipsec ike-group group-IKE proposal 10 hash 'sha256' set vpn ipsec ipsec-interfaces interface 'tun0' set vpn ipsec ipsec-interfaces interface 'tun1' set vpn ipsec ipsec-interfaces interface 'tun2' set vpn ipsec ipsec-interfaces interface 'tun3' set vpn ipsec site-to-site peer 192.168.0.2 authentication id '192.168.0.1' set vpn ipsec site-to-site peer 192.168.0.2 authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer 192.168.0.2 authentication pre-shared-secret 'SSSecccRetT' set vpn ipsec site-to-site peer 192.168.0.2 authentication remote-id '192.168.0.2' set vpn ipsec site-to-site peer 192.168.0.2 connection-type 'initiate' set vpn ipsec site-to-site peer 192.168.0.2 ike-group 'group-IKE' set vpn ipsec site-to-site peer 192.168.0.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 192.168.0.2 local-address '192.168.0.1' set vpn ipsec site-to-site peer 192.168.0.2 vti bind 'vti0' set vpn ipsec site-to-site peer 192.168.0.2 vti esp-group 'group-ESP' set vpn ipsec site-to-site peer 192.168.1.2 authentication id '192.168.1.1' set vpn ipsec site-to-site peer 192.168.1.2 authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer 192.168.1.2 authentication pre-shared-secret 'SSSecccRetT' set vpn ipsec site-to-site peer 192.168.1.2 authentication remote-id '192.168.1.2' set vpn ipsec site-to-site peer 192.168.1.2 connection-type 'initiate' set vpn ipsec site-to-site peer 192.168.1.2 ike-group 'group-IKE' set vpn ipsec site-to-site peer 192.168.1.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 192.168.1.2 local-address '192.168.1.1' set vpn ipsec site-to-site peer 192.168.1.2 vti bind 'vti1' set vpn ipsec site-to-site peer 192.168.1.2 vti esp-group 'group-ESP' set vpn ipsec site-to-site peer 192.168.2.2 authentication id '192.168.2.1' set vpn ipsec site-to-site peer 192.168.2.2 authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer 192.168.2.2 authentication pre-shared-secret 'SSSecccRetT' set vpn ipsec site-to-site peer 192.168.2.2 authentication remote-id '192.168.2.2' set vpn ipsec site-to-site peer 192.168.2.2 connection-type 'initiate' set vpn ipsec site-to-site peer 192.168.2.2 ike-group 'group-IKE' set vpn ipsec site-to-site peer 192.168.2.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 192.168.2.2 local-address '192.168.2.1' set vpn ipsec site-to-site peer 192.168.2.2 vti bind 'vti2' set vpn ipsec site-to-site peer 192.168.2.2 vti esp-group 'group-ESP' set vpn ipsec site-to-site peer 192.168.3.2 authentication id '192.168.3.1' set vpn ipsec site-to-site peer 192.168.3.2 authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer 192.168.3.2 authentication pre-shared-secret 'SSSecccRetT' set vpn ipsec site-to-site peer 192.168.3.2 authentication remote-id '192.168.3.2' set vpn ipsec site-to-site peer 192.168.3.2 connection-type 'initiate' set vpn ipsec site-to-site peer 192.168.3.2 ike-group 'group-IKE' set vpn ipsec site-to-site peer 192.168.3.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 192.168.3.2 local-address '192.168.3.1' set vpn ipsec site-to-site peer 192.168.3.2 vti bind 'vti3' set vpn ipsec site-to-site peer 192.168.3.2 vti esp-group 'group-ESP'