config vpn ipsec phase1-interface
edit "TO_A31"
show

set interface "INET_AC"
set nattraversal disable
set proposal aes128-sha1
set dhgrp 5 2
set remote-gw 200.91.246.2
set psksecret 1Ps3cT13nd@s_AC!!

next
end
 
 
config vpn ipsec phase2-interface
edit "TO_A31"
show

set phase1name "TO_A31"
set proposal aes128-sha1
set dhgrp 5 2
set src-subnet 10.0.0.0 255.255.255.0
set dst-subnet 10.10.31.0/24

next
end


config firewall policy
edit 28
show

set srcintf "LAN_CLOUD_AC"
set dstintf "TO_A31"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"

next
 
edit 29
show

set srcintf "TO_A31"
set dstintf "LAN_CLOUD_AC"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"

next
end

config router static
edit 17
show

set dst 10.10.31.0/24
set device "TO_A31"

next
end


#########

config vpn ipsec phase1-interface
edit "TO_A33"
show

set interface "INET_AC"
set nattraversal disable
set proposal aes128-sha1
set dhgrp 5 2
set remote-gw 200.91.246.26
set psksecret 1Ps3cT13nd@s_AC!!

next
end
 
 
config vpn ipsec phase2-interface
edit "TO_A33"
show

set phase1name "TO_A33"
set proposal aes128-sha1
set dhgrp 5 2
set src-subnet 10.0.0.0 255.255.255.0
set dst-subnet 10.10.33.0/24

next
end


config firewall policy
edit 30
show

set srcintf "LAN_CLOUD_AC"
set dstintf "TO_A33"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"

next
 
edit 31
show

set srcintf "TO_A33"
set dstintf "LAN_CLOUD_AC"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"

next
end

config router static
edit 18
show

set dst 10.10.33.0/24
set device "TO_A33"

next
end

######