How to configure tunnel interface VPN from CLI

This article presents the CLI commands to configure the tunnel interface VPN.

This can be used as a scrip for deploying  large number of VPN policies, thereby saving the time from configuring it via GUI.

config

vpn policy tunnel-interface < name >

gateway primary < IP > 

auth-method shared-secret 

bound-to interface X1

proposal ike authentication sha-256

proposal ike dh-group 2

proposal ike encryption aes-128

proposal ike exchange ikev2

proposal ike lifetime 28800

proposal ipsec authentication sha-256

proposal ipsec encryption aes-128

proposal ipsec lifetime 28800

proposal ipsec protocol esp

shared-secret < share secret >

exit

commit