set interfaces ge-0/0/0 unit 0 family inet address 200.200.12.1/24
set interfaces st0 unit 0 family inet mtu 1400
set interfaces st0 unit 0 family inet address 10.10.13.1/24
set security ike proposal CISCO_IKE_PROP authentication-method pre-shared-keys
set security ike proposal CISCO_IKE_PROP dh-group group2
set security ike proposal CISCO_IKE_PROP authentication-algorithm sha1
set security ike proposal CISCO_IKE_PROP encryption-algorithm 3des-cbc
set security ike proposal CISCO_IKE_PROP lifetime-seconds 28800
set security ike policy CISCO_IKE_POLICY mode aggressive
set security ike policy CISCO_IKE_POLICY proposals CISCO_IKE_PROP
set security ike policy CISCO_IKE_POLICY pre-shared-key ascii-text KEY123456
set security ike gateway CISCO_IKE_GW ike-policy CISCO_IKE_POLICY
set security ike gateway CISCO_IKE_GW dynamic hostname IOS.CISCO.COM
set security ike gateway CISCO_IKE_GW local-identity hostname SRX.JUNIPER.NET
set security ike gateway CISCO_IKE_GW external-interface ge-0/0/0
set security ipsec proposal CISCO_IPSEC_PROP protocol esp
set security ipsec proposal CISCO_IPSEC_PROP authentication-algorithm hmac-sha1-96
set security ipsec proposal CISCO_IPSEC_PROP encryption-algorithm 3des-cbc
set security ipsec proposal CISCO_IPSEC_PROP lifetime-seconds 3600
set security ipsec proposal CISCO_IPSEC_PROP lifetime-kilobytes 4608000
set security ipsec policy CISCO_IPSEC_POLICY proposals CISCO_IPSEC_PROP
set security zones security-zone trust interfaces st0.0 host-inbound-traffic system-services all
set security ipsec vpn CISCO_VPN ike gateway CISCO_IKE_GW
set security ipsec vpn CISCO_VPN ike ipsec-policy CISCO_IPSEC_POLICY
set security ipsec vpn CISCO_VPN establish-tunnels immediately
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ping
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ike
set security zones security-zone trust interfaces st0.0
set security flow tcp-mss ipsec-vpn mss 1350