Пример структуры IKERule

IKETransform ike_trf_01(

LifetimeSeconds = 28800

CipherAlg = "G2814789CPRO1-K256-CBC-65534"

HashAlg = "GR341194CPRO1-65534"

GroupID = VKO_1B

)

IKETransform ike_trf_02(

LifetimeSeconds = 28800

CipherAlg = "G2814789CPRO1-K256-CBC-65534"

HashAlg = "GR341194CPRO1-65534"

GroupID = MODP_1536

)

IKETransform ike_trf_03(

LifetimeSeconds = 28800

CipherAlg = "DES-CBC"

HashAlg = "GR341194CPRO1-65534"

GroupID = MODP_1024

)

IKETransform ike_trf_04(

LifetimeSeconds = 28800

CipherAlg = "AES-K128-CBC"

HashAlg = "GR341194CPRO1-65534" 

GroupID = MODP_768

)

IKERule ike_rule(

DoNotUseDPD = FALSE

DPDIdleDuration = 60

DPDResponseDuration = 5

DPDRetries = 3

MainModeAuthMethod *= auth_method_01

Transform *= ike_trf_01,ike_trf_02,ike_trf_03,ike_trf_04

DoAutopass = TRUE

)

IdentityEntry auth_identity_01(

)

AuthMethodPreshared auth_method_01(

SharedIKESecret = "dfd"

LocalID = auth_identity_01

)