config vpn ipsec phase1-interface

edit "to-remote"
set interface "POOL-ISA45617"
set local-gw 161.132.215.210
set peertype any
set net-device enable
set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
set dpd on-idle
set nattraversal disable
set remote-gw 190.117.178.37
set psksecret ENC
lxi0eebm8J/PANoKEHFUcZNSwelkP7bSZMoa7xmLXYpL/Cd5kIXK60PeoOJ1XypUR8haGS+DEan4ukXsbva
hiKa6Aon14AClOuNOccK5zzf5JbnGo7FbJXc62d7v0UMXoLGQB8bB3TtuQnjUp1DcySturMEF9u7p/
jmdjTTBXRGeM4g4UyvLuXdMfVUy+hWt2xkjfQ==
next
end

config vpn ipsec phase2-interface

edit "to-remote"
set phase1name "to-remote"
set proposal aes128-sha1 aes256-sha1 aes128-sha256 aes256-sha256 aes128gcm
aes256gcm chacha20poly1305
set src-subnet 192.168.2.0 255.255.255.0
set dst-subnet 192.168.3.0 255.255.255.0
next
end