dc-srx3660-0#

    }
    st0 {
        unit 0 {
            family inet {
                address 10.2.2.2/24;


=========================

security {
    ike {
        policy ike-policy-cfgr {
            mode main;
            proposal-set standard;
            pre-shared-key ascii-text "$9$4YZGi.PQ3/tTzORhSMWZUj"; ## SECRET-DATA
        }
        gateway ike-gate-cfgr {
            ike-policy ike-policy-cfgr;
            address 207.138.144.254;
            external-interface xe-1/0/1;
        }
    }
    ipsec {
        policy ipsec-policy-cfgr {
            proposal-set standard;
        }
        vpn ipsec-vpn-cfgr {
            bind-interface st0.0;
            vpn-monitor;
            ike {
                gateway ike-gate-cfgr;
                ipsec-policy ipsec-policy-cfgr;

        

=========================

        from-zone trust to-zone vpn {
            policy trust-vpn-cfgr {
                match {
                    source-address [ net-cfgr_10-15-0-0--20 net-cfgr_10-15-16-0--20 ];
                    destination-address net-cfgr_10-16-0-0--23;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone vpn to-zone trust {
            policy vpn-trust-cfgr {
                match {
                    source-address net-cfgr_10-16-0-0--23;
                    destination-address [ net-cfgr_10-15-0-0--20 net-cfgr_10-15-16-0--20 ];
                    application any;
                }
                then {
                    permit;