xref: /openbsd/regress/sbin/ipsecctl/ike61.ok (revision fe0dc84e) 
1FROM = "{ 2.2.2.0/24 (5.5.5.0/24), 3.3.3.0/24, 4.4.4.0/24 (6.6.6.0/24) }"
2TO = "{ 5.5.5.0/24, 6.6.6.0/24, 7.7.7.0/24 }"
3C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
4C set [peer-1.1.1.1]:Phase=1 force
5C set [peer-1.1.1.1]:Address=1.1.1.1 force
6C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
7C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
8C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
9C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
10C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
11C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
12C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
13C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
14C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
15C set [from-2.2.2.0/24-to-5.5.5.0/24]:Phase=2 force
16C set [from-2.2.2.0/24-to-5.5.5.0/24]:ISAKMP-peer=peer-1.1.1.1 force
17C set [from-2.2.2.0/24-to-5.5.5.0/24]:Configuration=phase2-from-2.2.2.0/24-to-5.5.5.0/24 force
18C set [from-2.2.2.0/24-to-5.5.5.0/24]:Local-ID=from-2.2.2.0/24 force
19C set [from-2.2.2.0/24-to-5.5.5.0/24]:NAT-ID=nat-5.5.5.0/24 force
20C set [from-2.2.2.0/24-to-5.5.5.0/24]:Remote-ID=to-5.5.5.0/24 force
21C set [phase2-from-2.2.2.0/24-to-5.5.5.0/24]:EXCHANGE_TYPE=QUICK_MODE force
22C set [phase2-from-2.2.2.0/24-to-5.5.5.0/24]:Suites=phase2-suite-from-2.2.2.0/24-to-5.5.5.0/24 force
23C set [phase2-suite-from-2.2.2.0/24-to-5.5.5.0/24]:Protocols=phase2-protocol-from-2.2.2.0/24-to-5.5.5.0/24 force
24C set [phase2-protocol-from-2.2.2.0/24-to-5.5.5.0/24]:PROTOCOL_ID=IPSEC_ESP force
25C set [phase2-protocol-from-2.2.2.0/24-to-5.5.5.0/24]:Transforms=phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
26C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
27C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
28C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
29C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
30C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
31C set [phase2-transform-from-2.2.2.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
32C set [from-2.2.2.0/24]:ID-type=IPV4_ADDR_SUBNET force
33C set [from-2.2.2.0/24]:Network=2.2.2.0 force
34C set [from-2.2.2.0/24]:Netmask=255.255.255.0 force
35C set [nat-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
36C set [nat-5.5.5.0/24]:Network=5.5.5.0 force
37C set [nat-5.5.5.0/24]:Netmask=255.255.255.0 force
38C set [to-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
39C set [to-5.5.5.0/24]:Network=5.5.5.0 force
40C set [to-5.5.5.0/24]:Netmask=255.255.255.0 force
41C add [Phase 2]:Connections=from-2.2.2.0/24-to-5.5.5.0/24
42C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
43C set [peer-1.1.1.1]:Phase=1 force
44C set [peer-1.1.1.1]:Address=1.1.1.1 force
45C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
46C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
47C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
48C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
49C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
50C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
51C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
52C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
53C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
54C set [from-2.2.2.0/24-to-6.6.6.0/24]:Phase=2 force
55C set [from-2.2.2.0/24-to-6.6.6.0/24]:ISAKMP-peer=peer-1.1.1.1 force
56C set [from-2.2.2.0/24-to-6.6.6.0/24]:Configuration=phase2-from-2.2.2.0/24-to-6.6.6.0/24 force
57C set [from-2.2.2.0/24-to-6.6.6.0/24]:Local-ID=from-2.2.2.0/24 force
58C set [from-2.2.2.0/24-to-6.6.6.0/24]:NAT-ID=nat-5.5.5.0/24 force
59C set [from-2.2.2.0/24-to-6.6.6.0/24]:Remote-ID=to-6.6.6.0/24 force
60C set [phase2-from-2.2.2.0/24-to-6.6.6.0/24]:EXCHANGE_TYPE=QUICK_MODE force
61C set [phase2-from-2.2.2.0/24-to-6.6.6.0/24]:Suites=phase2-suite-from-2.2.2.0/24-to-6.6.6.0/24 force
62C set [phase2-suite-from-2.2.2.0/24-to-6.6.6.0/24]:Protocols=phase2-protocol-from-2.2.2.0/24-to-6.6.6.0/24 force
63C set [phase2-protocol-from-2.2.2.0/24-to-6.6.6.0/24]:PROTOCOL_ID=IPSEC_ESP force
64C set [phase2-protocol-from-2.2.2.0/24-to-6.6.6.0/24]:Transforms=phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
65C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
66C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
67C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
68C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
69C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
70C set [phase2-transform-from-2.2.2.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
71C set [from-2.2.2.0/24]:ID-type=IPV4_ADDR_SUBNET force
72C set [from-2.2.2.0/24]:Network=2.2.2.0 force
73C set [from-2.2.2.0/24]:Netmask=255.255.255.0 force
74C set [nat-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
75C set [nat-5.5.5.0/24]:Network=5.5.5.0 force
76C set [nat-5.5.5.0/24]:Netmask=255.255.255.0 force
77C set [to-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
78C set [to-6.6.6.0/24]:Network=6.6.6.0 force
79C set [to-6.6.6.0/24]:Netmask=255.255.255.0 force
80C add [Phase 2]:Connections=from-2.2.2.0/24-to-6.6.6.0/24
81C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
82C set [peer-1.1.1.1]:Phase=1 force
83C set [peer-1.1.1.1]:Address=1.1.1.1 force
84C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
85C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
86C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
87C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
88C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
89C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
90C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
91C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
92C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
93C set [from-2.2.2.0/24-to-7.7.7.0/24]:Phase=2 force
94C set [from-2.2.2.0/24-to-7.7.7.0/24]:ISAKMP-peer=peer-1.1.1.1 force
95C set [from-2.2.2.0/24-to-7.7.7.0/24]:Configuration=phase2-from-2.2.2.0/24-to-7.7.7.0/24 force
96C set [from-2.2.2.0/24-to-7.7.7.0/24]:Local-ID=from-2.2.2.0/24 force
97C set [from-2.2.2.0/24-to-7.7.7.0/24]:NAT-ID=nat-5.5.5.0/24 force
98C set [from-2.2.2.0/24-to-7.7.7.0/24]:Remote-ID=to-7.7.7.0/24 force
99C set [phase2-from-2.2.2.0/24-to-7.7.7.0/24]:EXCHANGE_TYPE=QUICK_MODE force
100C set [phase2-from-2.2.2.0/24-to-7.7.7.0/24]:Suites=phase2-suite-from-2.2.2.0/24-to-7.7.7.0/24 force
101C set [phase2-suite-from-2.2.2.0/24-to-7.7.7.0/24]:Protocols=phase2-protocol-from-2.2.2.0/24-to-7.7.7.0/24 force
102C set [phase2-protocol-from-2.2.2.0/24-to-7.7.7.0/24]:PROTOCOL_ID=IPSEC_ESP force
103C set [phase2-protocol-from-2.2.2.0/24-to-7.7.7.0/24]:Transforms=phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
104C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
105C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
106C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
107C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
108C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
109C set [phase2-transform-from-2.2.2.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
110C set [from-2.2.2.0/24]:ID-type=IPV4_ADDR_SUBNET force
111C set [from-2.2.2.0/24]:Network=2.2.2.0 force
112C set [from-2.2.2.0/24]:Netmask=255.255.255.0 force
113C set [nat-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
114C set [nat-5.5.5.0/24]:Network=5.5.5.0 force
115C set [nat-5.5.5.0/24]:Netmask=255.255.255.0 force
116C set [to-7.7.7.0/24]:ID-type=IPV4_ADDR_SUBNET force
117C set [to-7.7.7.0/24]:Network=7.7.7.0 force
118C set [to-7.7.7.0/24]:Netmask=255.255.255.0 force
119C add [Phase 2]:Connections=from-2.2.2.0/24-to-7.7.7.0/24
120C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
121C set [peer-1.1.1.1]:Phase=1 force
122C set [peer-1.1.1.1]:Address=1.1.1.1 force
123C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
124C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
125C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
126C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
127C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
128C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
129C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
130C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
131C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
132C set [from-3.3.3.0/24-to-5.5.5.0/24]:Phase=2 force
133C set [from-3.3.3.0/24-to-5.5.5.0/24]:ISAKMP-peer=peer-1.1.1.1 force
134C set [from-3.3.3.0/24-to-5.5.5.0/24]:Configuration=phase2-from-3.3.3.0/24-to-5.5.5.0/24 force
135C set [from-3.3.3.0/24-to-5.5.5.0/24]:Local-ID=from-3.3.3.0/24 force
136C set [from-3.3.3.0/24-to-5.5.5.0/24]:Remote-ID=to-5.5.5.0/24 force
137C set [phase2-from-3.3.3.0/24-to-5.5.5.0/24]:EXCHANGE_TYPE=QUICK_MODE force
138C set [phase2-from-3.3.3.0/24-to-5.5.5.0/24]:Suites=phase2-suite-from-3.3.3.0/24-to-5.5.5.0/24 force
139C set [phase2-suite-from-3.3.3.0/24-to-5.5.5.0/24]:Protocols=phase2-protocol-from-3.3.3.0/24-to-5.5.5.0/24 force
140C set [phase2-protocol-from-3.3.3.0/24-to-5.5.5.0/24]:PROTOCOL_ID=IPSEC_ESP force
141C set [phase2-protocol-from-3.3.3.0/24-to-5.5.5.0/24]:Transforms=phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
142C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
143C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
144C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
145C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
146C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
147C set [phase2-transform-from-3.3.3.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
148C set [from-3.3.3.0/24]:ID-type=IPV4_ADDR_SUBNET force
149C set [from-3.3.3.0/24]:Network=3.3.3.0 force
150C set [from-3.3.3.0/24]:Netmask=255.255.255.0 force
151C set [to-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
152C set [to-5.5.5.0/24]:Network=5.5.5.0 force
153C set [to-5.5.5.0/24]:Netmask=255.255.255.0 force
154C add [Phase 2]:Connections=from-3.3.3.0/24-to-5.5.5.0/24
155C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
156C set [peer-1.1.1.1]:Phase=1 force
157C set [peer-1.1.1.1]:Address=1.1.1.1 force
158C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
159C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
160C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
161C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
162C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
163C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
164C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
165C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
166C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
167C set [from-3.3.3.0/24-to-6.6.6.0/24]:Phase=2 force
168C set [from-3.3.3.0/24-to-6.6.6.0/24]:ISAKMP-peer=peer-1.1.1.1 force
169C set [from-3.3.3.0/24-to-6.6.6.0/24]:Configuration=phase2-from-3.3.3.0/24-to-6.6.6.0/24 force
170C set [from-3.3.3.0/24-to-6.6.6.0/24]:Local-ID=from-3.3.3.0/24 force
171C set [from-3.3.3.0/24-to-6.6.6.0/24]:Remote-ID=to-6.6.6.0/24 force
172C set [phase2-from-3.3.3.0/24-to-6.6.6.0/24]:EXCHANGE_TYPE=QUICK_MODE force
173C set [phase2-from-3.3.3.0/24-to-6.6.6.0/24]:Suites=phase2-suite-from-3.3.3.0/24-to-6.6.6.0/24 force
174C set [phase2-suite-from-3.3.3.0/24-to-6.6.6.0/24]:Protocols=phase2-protocol-from-3.3.3.0/24-to-6.6.6.0/24 force
175C set [phase2-protocol-from-3.3.3.0/24-to-6.6.6.0/24]:PROTOCOL_ID=IPSEC_ESP force
176C set [phase2-protocol-from-3.3.3.0/24-to-6.6.6.0/24]:Transforms=phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
177C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
178C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
179C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
180C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
181C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
182C set [phase2-transform-from-3.3.3.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
183C set [from-3.3.3.0/24]:ID-type=IPV4_ADDR_SUBNET force
184C set [from-3.3.3.0/24]:Network=3.3.3.0 force
185C set [from-3.3.3.0/24]:Netmask=255.255.255.0 force
186C set [to-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
187C set [to-6.6.6.0/24]:Network=6.6.6.0 force
188C set [to-6.6.6.0/24]:Netmask=255.255.255.0 force
189C add [Phase 2]:Connections=from-3.3.3.0/24-to-6.6.6.0/24
190C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
191C set [peer-1.1.1.1]:Phase=1 force
192C set [peer-1.1.1.1]:Address=1.1.1.1 force
193C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
194C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
195C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
196C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
197C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
198C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
199C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
200C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
201C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
202C set [from-3.3.3.0/24-to-7.7.7.0/24]:Phase=2 force
203C set [from-3.3.3.0/24-to-7.7.7.0/24]:ISAKMP-peer=peer-1.1.1.1 force
204C set [from-3.3.3.0/24-to-7.7.7.0/24]:Configuration=phase2-from-3.3.3.0/24-to-7.7.7.0/24 force
205C set [from-3.3.3.0/24-to-7.7.7.0/24]:Local-ID=from-3.3.3.0/24 force
206C set [from-3.3.3.0/24-to-7.7.7.0/24]:Remote-ID=to-7.7.7.0/24 force
207C set [phase2-from-3.3.3.0/24-to-7.7.7.0/24]:EXCHANGE_TYPE=QUICK_MODE force
208C set [phase2-from-3.3.3.0/24-to-7.7.7.0/24]:Suites=phase2-suite-from-3.3.3.0/24-to-7.7.7.0/24 force
209C set [phase2-suite-from-3.3.3.0/24-to-7.7.7.0/24]:Protocols=phase2-protocol-from-3.3.3.0/24-to-7.7.7.0/24 force
210C set [phase2-protocol-from-3.3.3.0/24-to-7.7.7.0/24]:PROTOCOL_ID=IPSEC_ESP force
211C set [phase2-protocol-from-3.3.3.0/24-to-7.7.7.0/24]:Transforms=phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
212C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
213C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
214C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
215C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
216C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
217C set [phase2-transform-from-3.3.3.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
218C set [from-3.3.3.0/24]:ID-type=IPV4_ADDR_SUBNET force
219C set [from-3.3.3.0/24]:Network=3.3.3.0 force
220C set [from-3.3.3.0/24]:Netmask=255.255.255.0 force
221C set [to-7.7.7.0/24]:ID-type=IPV4_ADDR_SUBNET force
222C set [to-7.7.7.0/24]:Network=7.7.7.0 force
223C set [to-7.7.7.0/24]:Netmask=255.255.255.0 force
224C add [Phase 2]:Connections=from-3.3.3.0/24-to-7.7.7.0/24
225C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
226C set [peer-1.1.1.1]:Phase=1 force
227C set [peer-1.1.1.1]:Address=1.1.1.1 force
228C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
229C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
230C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
231C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
232C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
233C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
234C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
235C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
236C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
237C set [from-4.4.4.0/24-to-5.5.5.0/24]:Phase=2 force
238C set [from-4.4.4.0/24-to-5.5.5.0/24]:ISAKMP-peer=peer-1.1.1.1 force
239C set [from-4.4.4.0/24-to-5.5.5.0/24]:Configuration=phase2-from-4.4.4.0/24-to-5.5.5.0/24 force
240C set [from-4.4.4.0/24-to-5.5.5.0/24]:Local-ID=from-4.4.4.0/24 force
241C set [from-4.4.4.0/24-to-5.5.5.0/24]:NAT-ID=nat-6.6.6.0/24 force
242C set [from-4.4.4.0/24-to-5.5.5.0/24]:Remote-ID=to-5.5.5.0/24 force
243C set [phase2-from-4.4.4.0/24-to-5.5.5.0/24]:EXCHANGE_TYPE=QUICK_MODE force
244C set [phase2-from-4.4.4.0/24-to-5.5.5.0/24]:Suites=phase2-suite-from-4.4.4.0/24-to-5.5.5.0/24 force
245C set [phase2-suite-from-4.4.4.0/24-to-5.5.5.0/24]:Protocols=phase2-protocol-from-4.4.4.0/24-to-5.5.5.0/24 force
246C set [phase2-protocol-from-4.4.4.0/24-to-5.5.5.0/24]:PROTOCOL_ID=IPSEC_ESP force
247C set [phase2-protocol-from-4.4.4.0/24-to-5.5.5.0/24]:Transforms=phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
248C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
249C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
250C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
251C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
252C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
253C set [phase2-transform-from-4.4.4.0/24-to-5.5.5.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
254C set [from-4.4.4.0/24]:ID-type=IPV4_ADDR_SUBNET force
255C set [from-4.4.4.0/24]:Network=4.4.4.0 force
256C set [from-4.4.4.0/24]:Netmask=255.255.255.0 force
257C set [nat-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
258C set [nat-6.6.6.0/24]:Network=6.6.6.0 force
259C set [nat-6.6.6.0/24]:Netmask=255.255.255.0 force
260C set [to-5.5.5.0/24]:ID-type=IPV4_ADDR_SUBNET force
261C set [to-5.5.5.0/24]:Network=5.5.5.0 force
262C set [to-5.5.5.0/24]:Netmask=255.255.255.0 force
263C add [Phase 2]:Connections=from-4.4.4.0/24-to-5.5.5.0/24
264C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
265C set [peer-1.1.1.1]:Phase=1 force
266C set [peer-1.1.1.1]:Address=1.1.1.1 force
267C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
268C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
269C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
270C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
271C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
272C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
273C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
274C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
275C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
276C set [from-4.4.4.0/24-to-6.6.6.0/24]:Phase=2 force
277C set [from-4.4.4.0/24-to-6.6.6.0/24]:ISAKMP-peer=peer-1.1.1.1 force
278C set [from-4.4.4.0/24-to-6.6.6.0/24]:Configuration=phase2-from-4.4.4.0/24-to-6.6.6.0/24 force
279C set [from-4.4.4.0/24-to-6.6.6.0/24]:Local-ID=from-4.4.4.0/24 force
280C set [from-4.4.4.0/24-to-6.6.6.0/24]:NAT-ID=nat-6.6.6.0/24 force
281C set [from-4.4.4.0/24-to-6.6.6.0/24]:Remote-ID=to-6.6.6.0/24 force
282C set [phase2-from-4.4.4.0/24-to-6.6.6.0/24]:EXCHANGE_TYPE=QUICK_MODE force
283C set [phase2-from-4.4.4.0/24-to-6.6.6.0/24]:Suites=phase2-suite-from-4.4.4.0/24-to-6.6.6.0/24 force
284C set [phase2-suite-from-4.4.4.0/24-to-6.6.6.0/24]:Protocols=phase2-protocol-from-4.4.4.0/24-to-6.6.6.0/24 force
285C set [phase2-protocol-from-4.4.4.0/24-to-6.6.6.0/24]:PROTOCOL_ID=IPSEC_ESP force
286C set [phase2-protocol-from-4.4.4.0/24-to-6.6.6.0/24]:Transforms=phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
287C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
288C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
289C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
290C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
291C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
292C set [phase2-transform-from-4.4.4.0/24-to-6.6.6.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
293C set [from-4.4.4.0/24]:ID-type=IPV4_ADDR_SUBNET force
294C set [from-4.4.4.0/24]:Network=4.4.4.0 force
295C set [from-4.4.4.0/24]:Netmask=255.255.255.0 force
296C set [nat-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
297C set [nat-6.6.6.0/24]:Network=6.6.6.0 force
298C set [nat-6.6.6.0/24]:Netmask=255.255.255.0 force
299C set [to-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
300C set [to-6.6.6.0/24]:Network=6.6.6.0 force
301C set [to-6.6.6.0/24]:Netmask=255.255.255.0 force
302C add [Phase 2]:Connections=from-4.4.4.0/24-to-6.6.6.0/24
303C set [Phase 1]:1.1.1.1=peer-1.1.1.1 force
304C set [peer-1.1.1.1]:Phase=1 force
305C set [peer-1.1.1.1]:Address=1.1.1.1 force
306C set [peer-1.1.1.1]:Configuration=phase1-peer-1.1.1.1 force
307C set [phase1-peer-1.1.1.1]:EXCHANGE_TYPE=ID_PROT force
308C add [phase1-peer-1.1.1.1]:Transforms=phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072 force
309C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
310C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
311C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
312C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
313C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
314C set [phase1-transform-peer-1.1.1.1-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
315C set [from-4.4.4.0/24-to-7.7.7.0/24]:Phase=2 force
316C set [from-4.4.4.0/24-to-7.7.7.0/24]:ISAKMP-peer=peer-1.1.1.1 force
317C set [from-4.4.4.0/24-to-7.7.7.0/24]:Configuration=phase2-from-4.4.4.0/24-to-7.7.7.0/24 force
318C set [from-4.4.4.0/24-to-7.7.7.0/24]:Local-ID=from-4.4.4.0/24 force
319C set [from-4.4.4.0/24-to-7.7.7.0/24]:NAT-ID=nat-6.6.6.0/24 force
320C set [from-4.4.4.0/24-to-7.7.7.0/24]:Remote-ID=to-7.7.7.0/24 force
321C set [phase2-from-4.4.4.0/24-to-7.7.7.0/24]:EXCHANGE_TYPE=QUICK_MODE force
322C set [phase2-from-4.4.4.0/24-to-7.7.7.0/24]:Suites=phase2-suite-from-4.4.4.0/24-to-7.7.7.0/24 force
323C set [phase2-suite-from-4.4.4.0/24-to-7.7.7.0/24]:Protocols=phase2-protocol-from-4.4.4.0/24-to-7.7.7.0/24 force
324C set [phase2-protocol-from-4.4.4.0/24-to-7.7.7.0/24]:PROTOCOL_ID=IPSEC_ESP force
325C set [phase2-protocol-from-4.4.4.0/24-to-7.7.7.0/24]:Transforms=phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL force
326C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
327C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
328C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
329C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
330C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
331C set [phase2-transform-from-4.4.4.0/24-to-7.7.7.0/24-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
332C set [from-4.4.4.0/24]:ID-type=IPV4_ADDR_SUBNET force
333C set [from-4.4.4.0/24]:Network=4.4.4.0 force
334C set [from-4.4.4.0/24]:Netmask=255.255.255.0 force
335C set [nat-6.6.6.0/24]:ID-type=IPV4_ADDR_SUBNET force
336C set [nat-6.6.6.0/24]:Network=6.6.6.0 force
337C set [nat-6.6.6.0/24]:Netmask=255.255.255.0 force
338C set [to-7.7.7.0/24]:ID-type=IPV4_ADDR_SUBNET force
339C set [to-7.7.7.0/24]:Network=7.7.7.0 force
340C set [to-7.7.7.0/24]:Netmask=255.255.255.0 force
341C add [Phase 2]:Connections=from-4.4.4.0/24-to-7.7.7.0/24
342C set [Phase 1]:3ffe::51=peer-3ffe::51 force
343C set [peer-3ffe::51]:Phase=1 force
344C set [peer-3ffe::51]:Address=3ffe::51 force
345C set [peer-3ffe::51]:Configuration=phase1-peer-3ffe::51 force
346C set [phase1-peer-3ffe::51]:EXCHANGE_TYPE=ID_PROT force
347C add [phase1-peer-3ffe::51]:Transforms=phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072 force
348C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:AUTHENTICATION_METHOD=RSA_SIG force
349C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:HASH_ALGORITHM=SHA force
350C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:ENCRYPTION_ALGORITHM=AES_CBC force
351C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:KEY_LENGTH=128,128:256 force
352C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:GROUP_DESCRIPTION=MODP_3072 force
353C set [phase1-transform-peer-3ffe::51-RSA_SIG-SHA-AES128-MODP_3072]:Life=LIFE_MAIN_MODE force
354C set [from-3ffe:1::/64-to-3ffe:2::/64]:Phase=2 force
355C set [from-3ffe:1::/64-to-3ffe:2::/64]:ISAKMP-peer=peer-3ffe::51 force
356C set [from-3ffe:1::/64-to-3ffe:2::/64]:Configuration=phase2-from-3ffe:1::/64-to-3ffe:2::/64 force
357C set [from-3ffe:1::/64-to-3ffe:2::/64]:Local-ID=from-3ffe:1::/64 force
358C set [from-3ffe:1::/64-to-3ffe:2::/64]:NAT-ID=nat-affe:1::/64 force
359C set [from-3ffe:1::/64-to-3ffe:2::/64]:Remote-ID=to-3ffe:2::/64 force
360C set [phase2-from-3ffe:1::/64-to-3ffe:2::/64]:EXCHANGE_TYPE=QUICK_MODE force
361C set [phase2-from-3ffe:1::/64-to-3ffe:2::/64]:Suites=phase2-suite-from-3ffe:1::/64-to-3ffe:2::/64 force
362C set [phase2-suite-from-3ffe:1::/64-to-3ffe:2::/64]:Protocols=phase2-protocol-from-3ffe:1::/64-to-3ffe:2::/64 force
363C set [phase2-protocol-from-3ffe:1::/64-to-3ffe:2::/64]:PROTOCOL_ID=IPSEC_ESP force
364C set [phase2-protocol-from-3ffe:1::/64-to-3ffe:2::/64]:Transforms=phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL force
365C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:TRANSFORM_ID=AES force
366C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:KEY_LENGTH=128,128:256 force
367C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:ENCAPSULATION_MODE=TUNNEL force
368C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:AUTHENTICATION_ALGORITHM=HMAC_SHA2_256 force
369C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:GROUP_DESCRIPTION=MODP_3072 force
370C set [phase2-transform-from-3ffe:1::/64-to-3ffe:2::/64-AES128-SHA2_256-MODP_3072-TUNNEL]:Life=LIFE_QUICK_MODE force
371C set [from-3ffe:1::/64]:ID-type=IPV6_ADDR_SUBNET force
372C set [from-3ffe:1::/64]:Network=3ffe:1:: force
373C set [from-3ffe:1::/64]:Netmask=ffff:ffff:ffff:ffff:: force
374C set [nat-affe:1::/64]:ID-type=IPV6_ADDR_SUBNET force
375C set [nat-affe:1::/64]:Network=affe:1:: force
376C set [nat-affe:1::/64]:Netmask=ffff:ffff:ffff:ffff:: force
377C set [to-3ffe:2::/64]:ID-type=IPV6_ADDR_SUBNET force
378C set [to-3ffe:2::/64]:Network=3ffe:2:: force
379C set [to-3ffe:2::/64]:Netmask=ffff:ffff:ffff:ffff:: force
380C add [Phase 2]:Passive-Connections=from-3ffe:1::/64-to-3ffe:2::/64
381