set interfaces st0 unit 9 description "IPSec interface for IMI-HYD VPN"
set security ike proposal IMI-HYD-ike-phase1-proposal authentication-method pre-shared-keys
set security ike proposal IMI-HYD-ike-phase1-proposal dh-group group2
set security ike proposal IMI-HYD-ike-phase1-proposal authentication-algorithm md5
set security ike proposal IMI-HYD-ike-phase1-proposal encryption-algorithm 3des-cbc
set security ike proposal IMI-HYD-ike-phase1-proposal lifetime-seconds 86400
set security ike policy IMI-HYD-ike-phase1-policy mode main
set security ike policy IMI-HYD-ike-phase1-policy proposals IMI-HYD-ike-phase1-proposal
set security ike policy IMI-HYD-ike-phase1-policy pre-shared-key ascii-text "$9$nlU1/Cp1IEKv8u0Ihrv7NGUjqm5OBEK8xreY4JDmPQF39uBEcyKv8hSwgoJHkO1IcevMWXbYg8LxN"
set security ike gateway IMI-HYD-GW01 ike-policy IMI-HYD-ike-phase1-policy
set security ike gateway IMI-HYD-GW01 address 203.199.178.219
set security ike gateway IMI-HYD-GW01 external-interface reth0.901
set security ipsec proposal IMI-HYD-ipsec-phase2-proposal protocol esp
set security ipsec proposal IMI-HYD-ipsec-phase2-proposal authentication-algorithm hmac-md5-96
set security ipsec proposal IMI-HYD-ipsec-phase2-proposal encryption-algorithm 3des-cbc
set security ipsec proposal IMI-HYD-ipsec-phase2-proposal lifetime-seconds 3600
set security ipsec proposal IMI-HYD-ipsec-phase2-proposal lifetime-kilobytes 4608000
set security ipsec policy IMI-HYD-ipsec-phase2-policy proposals IMI-HYD-ipsec-phase2-proposal
set security ipsec vpn IMI-HYD-VPN-1 bind-interface st0.9
set security ipsec vpn IMI-HYD-VPN-1 ike gateway IMI-HYD-GW01
set security ipsec vpn IMI-HYD-VPN-1 ike proxy-identity local 10.2.143.0/24
set security ipsec vpn IMI-HYD-VPN-1 ike proxy-identity remote 203.199.178.211/32
set security ipsec vpn IMI-HYD-VPN-1 ike proxy-identity service any
set security ipsec vpn IMI-HYD-VPN-1 ike ipsec-policy IMI-HYD-ipsec-phase2-policy
set security ipsec vpn IMI-HYD-VPN-1 establish-tunnels immediately
set security address-book global address Peer-VPN-IMI-HYD1 203.199.178.211/32


set security address-book global address Kin-VPN-IMI-HYD1 10.2.143.227/32
set security address-book global address Kin-VPN-IMI-HYD2 10.2.143.228/32
set security address-book global address Kin-VPN-IMI-HYD3 10.2.143.229/32
set security address-book global address Kin-VPN-IMI-HYD4 10.2.143.230/32
set security address-book global address Kin-VPN-IMI-HYD5 10.2.143.231/32
set security address-book global address Kin-VPN-IMI-HYD6 10.2.143.232/32
set security address-book global address Kin-VPN-IMI-HYD7 10.2.143.233/32
set security address-book global address Kin-VPN-IMI-HYD8 10.2.143.234/32
set security address-book global address Kin-VPN-IMI-HYD9 10.2.143.235/32
set security address-book global address Kin-VPN-IMI-HYD10 10.2.143.236/32
set security address-book global address Kin-VPN-IMI-HYD11 10.2.143.237/32
set security address-book global address Kin-VPN-IMI-HYD12 10.2.143.238/32
set security address-book global address Kin-VPN-IMI-HYD13 10.2.143.239/32
set security address-book global address Kin-VPN-IMI-HYD14 10.2.143.240/32
set security address-book global address Kin-VPN-IMI-HYD15 10.2.143.241/32
set security address-book global address Kin-VPN-IMI-HYD16 10.2.143.242/32
set security address-book global address Kin-VPN-IMI-HYD17 10.2.143.243/32
set security address-book global address Kin-VPN-IMI-HYD18 10.2.143.244/32
set security address-book global address Kin-VPN-IMI-HYD19 10.2.143.245/32
set security address-book global address Kin-VPN-IMI-HYD20 10.2.143.246/32
set security address-book global address Kin-VPN-IMI-HYD21 10.2.143.247/32
set security address-book global address Kin-VPN-IMI-HYD22 10.2.143.248/32
set security address-book global address Kin-VPN-IMI-HYD23 10.2.143.249/32
set security address-book global address Kin-VPN-IMI-HYD24 10.2.143.250/32
set security address-book global address Kin-VPN-IMI-HYD25 10.2.143.251/32
set security address-book global address Kin-VPN-IMI-HYD26 10.2.143.252/32
set security address-book global address Kin-VPN-IMI-HYD27 10.2.143.253/32
set security address-book global address Kin-VPN-IMI-HYD28 10.2.143.254/32
set security address-book global address Kin-VPN-IMI-HYD29 10.2.143.160/27
set security address-book global address Kin-VPN-IMI-HYD30 10.2.143.166/32
set security address-book global address Kin-VPN-IMI-HYD31 10.2.143.169/32
set security address-book global address-set Peer-VPN-IMI-HYD-set address Peer-VPN-IMI-HYD1
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD1
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD2
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD3
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD4
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD5
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD6
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD7
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD8
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD9
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD10
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD11
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD12
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD13
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD14
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD15
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD16
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD17
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD18
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD19
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD20
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD21
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD22
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD23
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD24
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD25
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD26
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD27
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD28
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD29
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD1
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD2
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD7
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD8
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD9
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD10
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD11
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD12
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD13
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD14
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD15
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD16
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD17
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD18
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD19
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD20
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD22
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD23
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD24
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD25
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD26
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD27
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD28
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD30
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD31
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD3
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD4
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD5
set security address-book global address-set Kin-CRBT-set address Kin-VPN-IMI-HYD6
set security nat source rule-set NAT-SMSC rule rule-CRBT-Partner3 match source-address-name Kin-VPN-IMI-HYD31
set security policies from-zone Zone-Interco-IGW to-zone Zone-Gi-Network policy Internet-to-CRBT-SRV match destination-address Kin-VPN-IMI-HYD7
set security policies from-zone Zone-Interco-IGW to-zone Zone-ZSmart-Network policy Map-Internet-to-CRBT match destination-address Kin-VPN-IMI-HYD8
set security policies from-zone Zone-Interco-IGW to-zone Zone-ZSmart-Network policy Map-Internet-to-CRBT2 match destination-address Kin-VPN-IMI-HYD7
set security policies from-zone Zone-Interco-IGW to-zone Zone-ZSmart-Network policy Map-Internet-to-CRBT3 match destination-address Kin-VPN-IMI-HYD31
set security policies from-zone Zone-ZSmart-Network to-zone Zone-Interco-IGW policy Map-CRBT-to-Internet match source-address Kin-VPN-IMI-HYD8
set security policies from-zone Zone-ZSmart-Network to-zone Zone-Interco-IGW policy Map-CRBT-to-Internet2 match source-address Kin-VPN-IMI-HYD7
set security policies from-zone Zone-ZSmart-Network to-zone Zone-Interco-IGW policy CRBT-to-Internet3 match source-address Kin-VPN-IMI-HYD31

set security policies from-zone Zone-ZSmart-Network to-zone Zone-VPN-IMI-HYD policy VPN-IMI-HYD-CCT-to-Remote match source-address Kin-VPN-IMI-HYD-set
set security policies from-zone Zone-ZSmart-Network to-zone Zone-VPN-IMI-HYD policy VPN-IMI-HYD-CCT-to-Remote match destination-address Peer-VPN-IMI-HYD-set
set security policies from-zone Zone-ZSmart-Network to-zone Zone-VPN-IMI-HYD policy VPN-IMI-HYD-CCT-to-Remote match application Service-VPN-IMI-HYD
set security policies from-zone Zone-ZSmart-Network to-zone Zone-VPN-IMI-HYD policy VPN-IMI-HYD-CCT-to-Remote then permit
set security policies from-zone Zone-VPN-IMI-HYD to-zone Zone-ZSmart-Network policy VPN-IMI-HYD-remote-to-CCT match source-address Peer-VPN-IMI-HYD-set
set security policies from-zone Zone-VPN-IMI-HYD to-zone Zone-ZSmart-Network policy VPN-IMI-HYD-remote-to-CCT match destination-address Kin-VPN-IMI-HYD-set
set security policies from-zone Zone-VPN-IMI-HYD to-zone Zone-ZSmart-Network policy VPN-IMI-HYD-remote-to-CCT match application Service-VPN-IMI-HYD
set security policies from-zone Zone-VPN-IMI-HYD to-zone Zone-ZSmart-Network policy VPN-IMI-HYD-remote-to-CCT then permit
set security policies from-zone Zone-VPN-IMI-HYD to-zone Zone-ZSmart-Network policy VPN-IMI-HYD-remote-to-CCT then log session-close
set security zones security-zone Zone-VPN-IMI-HYD host-inbound-traffic system-services all
set security zones security-zone Zone-VPN-IMI-HYD interfaces st0.9
set applications application-set Service-VPN-IMI-HYD application any


set security address-book global address Kin-VPN-IMI-HYD-test 10.2.143.226/32
set security address-book global address-set Kin-VPN-IMI-HYD-set address Kin-VPN-IMI-HYD-test