20.3. IPSec Phase 2¶
Phase 2 entries can be created below the current Phase 1 entry.
Local Network is the network or address on the VT AIR that should be accessible from the remote side.
Remote Network is the network or address that should be accessible from the VT AIR side on the remote side.
Each pair of Local <-> Remote Networks needs a Phase 2 entry. In the background the system will create a mapping between the two in order to send it through the IPSec Tunnel.
Algorithms can be a mix of any of the algorithms. You can add as many combinations as you like.
Lifetime must also match the remote sides lifetime.