---
ipsec_route_based_ike_group:
  name: IKE-GROUP
  key_exchange: ikev2
  lifetime: 28800
  dh_group: 14
  encryption: aes256
  hash: sha256
  close_action: start
  dead_peer_detection: {action: restart, interval: 10, timeout: 30}
ipsec_route_based_esp_group:
  name: ESP-GROUP
  lifetime: 3600
  pfs: dh-group14
  encryption: aes256
  hash: sha256
ipsec_route_based_ospf: null
ipsec_route_based_default_gateway: ""
ipsec_route_based_interfaces: []
ipsec_route_based_disable_route_autoinstall: true
ipsec_route_based_interface_routes: []
ipsec_route_based_bgp: null
ipsec_route_based_policy: null