Пример структуры IPsecAction

IPsecAction tunnel_ipsec_des_md5_action(

  TunnelingParameters *= TunnelEntry(

    PeerIPAddress = 192.168.2.1

    DFHandling = CLEAR

  )

  IKERule = ike_r

  GroupID = MODP_768

  ContainedProposals *= (ipsec_ah_md5,  ipsec_esp_des), (ipsec_esp_des_md5)

)

ESPProposal ipsec_esp_des(

  Transform *= ESPTransform(

    CipherAlg = "DES-CBC"

  )

)

AHProposal ipsec_ah_md5(

  Transform *= AHTransform(

    IntegrityAlg = "MD5-H96-HMAC"

  )

)

ESPProposal ipsec_esp_des_md5(

  Transform *= ESPTransform(

    CipherAlg = "DES-CBC"

    IntegrityAlg = "MD5-H96-HMAC"

  )

)