config phase1-interface

Description: Configure the VPN remote gateway.

config vpn ipsec phase1-interface
  edit <name>
    set ike-version [1 | 2]
    set keylife [120 – 172800]
    set proposal [des-md5 | des-sha1 | des-sha256 | 3des-md5 | 3des-sha1 | 3dessha256 | aes128-md5 | aes128-sha1 | aes128-sha256 | aes256-md5 | aes256-sha1 | aes256-sha256]
    set dhgrp [1 | 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 27 | 28| 29 | 30 | 31 | 32 ]
    set *interface <name1>
    set type [static | ddns]
    set *remote-gw {ipv4-address}
    set *remotegw-ddns {string} *available when type is set to ddns
    set authmethod [psk | signature]
    set *psksecret {string}
    set localid {string}
    set peerid {string}
    set add-gw-route [enable | disable]
    set dev-id-notification [enable | disable]
    set dev-id <name1> *available when dev-id-notification is enabled
    set monitor <name>
  next
end

Sample command:

config vpn ipsec phase1-interface
  edit phase1_1
    set ike-version 2
    set keylife 86400
    set proposal aes128-sha256 aes256-sha256 3des-sha256 aes128-sha1 aes256-sha1 3dessha1
    set dhgrp 14 5 31 20
    set interface wan
    set type static
    set remote-gw 207.102.148.196
    set authmethod psk
    set psksecret ******
    set localid 92
    set peerid 22
    set add-gw-route disable
    set dev-id-notification disable
    set monitor pri
  next
end

Parameter	Description	Type	Size	Default
ike-version	IKE protocol version.	option	-	2
	Option Description 1 Version 1 2 Version 2
keylife	Time to wait in seconds before the phase 1 encryption key expires.	integer	120 - 172800	86400
proposal	Phase1 proposal.	option	-	aes128-sha256 aes256-sha256 3des-sha256 aes128-sha1 aes256-sha1 3des-sha1
	Option Description des-md5 des-sha1 des-sha256 3des-md5 3des-sha1 3des-sha256 aes128-md5 aes128-sha1 aes128-sha256 aes256-md5 aes256-sha1 aes256-sha256
dhgrp	DH group.	option	-	14, 5
	Option Description 1 2 5 14 15 16 17 18 19 20 21 27 28 29 30 31 32
interface	The outgoing interface.	option	-	none
	Option Description lan LAN as the outgoing interface. lo Loopback as the outgoing interface. lte1 LTE 1 as the outgoing interface. wan WAN as the outgoing interface. port4 Port 4 as the outgoing interface.
remote-gw	The IPv4 address of the remote gateway's external interface.	IPv4 address	-	none
authmethod	Authentication method.	option	-	psk
	Option Description psk Preshared key. signature Signature certificate.
psksecret	Pre-shared secret for PSK authentication (ASCII string or hexadecimal encoded with a leading 0x).	string	-	none
localid	Local ID.	string	-	none
peerid	Peer identity.	string	-	none
add-gw-route	Whether to automatically add a route to the remote gateway.	option	-	disable
	Option Description enable Enable automatically adding a route to the remote gateway. disable Disable automatically adding a route to the remote gateway.
dev-id-notification	Whether to enable device ID notification for the first IKE message.	option	-	disable
	Option Description enable Enable device ID notification. disable Disable device ID notification.
dev-id	The Device ID carried by the device ID notification.	string	-	none
monitor	Specify the IPsec phase1 interface as primary.	string	-	none