Re: How to add second tunnel to ERX

I've outlined the required changes, adjust rest of the settings as needed.

set vpn ipsec esp-group FOO1 compression disable
set vpn ipsec esp-group FOO1 lifetime 3600
set vpn ipsec esp-group FOO1 mode tunnel
set vpn ipsec esp-group FOO1 pfs disable
set vpn ipsec esp-group FOO1 proposal 1 encryption aes128
set vpn ipsec esp-group FOO1 proposal 1 hash sha1
set vpn ipsec ike-group FOO1 lifetime 28800
set vpn ipsec ike-group FOO1 proposal 1 dh-group 5
set vpn ipsec ike-group FOO1 proposal 1 encryption aes128
set vpn ipsec ike-group FOO1 proposal 1 hash sha1
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH authentication mode pre-shared-secret
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH authentication pre-shared-secret XXXXXXKEYXXXXXXX
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH connection-type initiate
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH ike-group FOO1
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHHlocal-address XXX.YYY.ZZZ.AAA
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH tunnel 1 allow-nat-networks disable
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH tunnel 1 allow-public-networks disable
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH tunnel 1 esp-group FOO1
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH tunnel 1 local prefix 192.168.7.0/24
set vpn ipsec site-to-site peer EEE.FFF.GGG.HHH tunnel 1 remote prefix 192.168.XXX.0/24