kieron@ten-forward# show vpn ipsec allow-access-to-local-interface ike-group auto-firewall-nat-exclude site-to-site esp-group [edit] kieron@ten-forward# show vpn ipsec site-to-site peer 76.125.229.100 { authentication { mode pre-shared-secret pre-shared-secret XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX } connection-type initiate description ipsec ike-group FOO0 ikev2-reauth inherit local-address 73.129.236.163 vti { bind vti0 esp-group FOO0 } } [edit]