# Do not edit this file. It is overwritten by VpnConf.
# SIGNATURE MD5 = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
# Creation Date : 2025-12-22 at 13:34:35
# Written by CyberoamServer XGS3300_RL01_SFOS 21.5.0 GA-Build171
# Client Version :
# 	CyberoamVPNClient :3.11.008
# 	IKE Service :3.10.08,02.13

[General]
Shared-SADB = Defined
Retransmits = 5 
Exchange-max-time = 10
Default-phase-1-lifetime = 46800,360:86400
Bitblocking = 0
Xauth-interval = 20
DPD-interval = 30 
DPD_retrans = 7
DPD_wait = 30 

[Default-phase-2-lifetime]
LIFE_TYPE = SECONDS 
LIFE_DURATION = 43200,360:86400

# ==================== PHASES 1 ====================

[Phase 1]
185.164.230.171 = APS_HH-P1

[APS_HH-main-mode]
DOI = IPSEC
EXCHANGE_TYPE = ID_PROT
Transforms = AES256-SHA2_256-GRP21

[AES256-SHA2_256-GRP21]
ENCRYPTION_ALGORITHM = AES_CBC
KEY_LENGTH = 256,128:256
HASH_ALGORITHM = SHA2_256
GROUP_DESCRIPTION = ECP521
AUTHENTICATION_METHOD = PRE_SHARED
Life = LIFE_MAIN_MODE

[APS_HH-P1]
Phase = 1
Family = IPV4
Address = 185.164.230.171
Transport = udp
Configuration = APS_HH-main-mode
Rconf = 1
Authentication = "tZfNkccrTq49wyvsxLak86jF"
Xauth = 0
Xpopup = 1
NATT_ENABLED = 1


# ==================== PHASES 2 ====================

[Phase 2]
Manual-connections = APS_HH-APS_HH1-P2

[APS_HH-APS_HH1-P2]
Phase = 2
ISAKMP-peer = APS_HH-P1
Remote-ID = APS_HH1-remote-addr
Configuration = APS_HH1-quick-mode
AutoStart = 0
USBStart = 0

# ==================== Ipsec ID ====================

[APS_HH1-remote-addr]
ID-type = IPV4_ADDR_SUBNET
Network = 0.0.0.0
Netmask = 0.0.0.0

# ==================== TRANSFORMS ====================

[APS_HH1-quick-mode]
DOI = IPSEC
EXCHANGE_TYPE = QUICK_MODE
Suites = APS_HH1-quick-mode-suite

[APS_HH1-quick-mode-suite]
Protocols = TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN

[TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN]
PROTOCOL_ID = IPSEC_ESP
Transforms = TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN-XF

[TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN-XF]
TRANSFORM_ID = AES
KEY_LENGTH = 256,128:256
AUTHENTICATION_ALGORITHM = HMAC_SHA2_256
GROUP_DESCRIPTION = ECP521
ENCAPSULATION_MODE = TUNNEL
Life = Default-phase-2-lifetime