Пример структуры IKERule

IKETransform ike_trf_01(

  LifetimeSeconds = 28800

  CipherAlg = "G2814789CPRO1-K256-CBC-65534"

  HashAlg = "GR341194CPRO1-65534"

  GroupID = VKO_1B

)

IKETransform ike_trf_02(

  LifetimeSeconds = 28800

  CipherAlg = "G2814789CPRO1-K256-CBC-65534"

  HashAlg = "GR341194CPRO1-65534"

  GroupID = MODP_1536

)

IKETransform ike_trf_03(

  LifetimeSeconds = 28800

  CipherAlg = "DES-CBC"

  HashAlg = "GR341194CPRO1-65534"

  GroupID = MODP_1024

)

IKETransform ike_trf_04(

  LifetimeSeconds = 28800

  CipherAlg = "AES-K128-CBC"

  HashAlg = "GR341194CPRO1-65534" 

  GroupID = MODP_768

)

IKERule ike_rule(

  DoNotUseDPD = FALSE

  DPDIdleDuration = 60

  DPDResponseDuration = 5

  DPDRetries = 3

  MainModeAuthMethod *= auth_method_01

  Transform *= ike_trf_01,ike_trf_02,ike_trf_03,ike_trf_04

  DoAutopass = TRUE

)

IdentityEntry auth_identity_01(

)

AuthMethodPreshared auth_method_01(

  SharedIKESecret = "dfd"

  LocalID = auth_identity_01

)