set interfaces st0 unit 2 family inet address 31.1.1.1/24

set security zones security-zone vpn interfaces st0.2

set routing-options static route 10.99.10.0/24 next-hop st0.2

set security ike proposal bobo-ph2 authentication-method pre-shared-keys
set security ike proposal bobo-ph2 dh-group group14
set security ike proposal bobo-ph2 authentication-algorithm sha-256
set security ike proposal bobo-ph2 encryption-algorithm aes-256-cbc
set security ike proposal bobo-ph2 lifetime-seconds 3600
set security ike policy ilm_csd mode main
set security ike policy ilm_csd proposals bobo-ph2
set security ike policy ilm_csd pre-shared-key ascii-text "xxx"
set security ike gateway ilm_csd ike-policy ilm_csd
set security ike gateway ilm_csd address 100.100.100.100
set security ike gateway csd_ilm local-identity user-at-hostname "beta@csd.ro"
set security ike gateway csd_ilm remote-identity user-at-hostname "alfa@csd.ro"
set security ike gateway ilm_csd external-interface ge-0/0/0.0

set security ipsec proposal bobo-ph2 protocol esp
set security ipsec proposal bobo-ph2 authentication-algorithm hmac-sha-256-128
set security ipsec proposal bobo-ph2 encryption-algorithm aes-256-cbc
set security ipsec proposal bobo-ph2 lifetime-seconds 13000
set security ipsec policy ipsec_vpn_phaseII perfect-forward-secrecy keys group14
set security ipsec policy ipsec_vpn_phaseII proposals bobo-ph2
set security ipsec vpn ilm_csd bind-interface st0.2
set security ipsec vpn ilm_csd ike gateway ilm_csd
set security ipsec vpn ilm_csd ike ipsec-policy ipsec_vpn_phaseII
set security ipsec vpn ilm_csd establish-tunnels immediately