VYos ipsec conf

esp-group ESP {
     lifetime 3600
     pfs dh-group2
     proposal 1 {
         encryption aes128
         hash sha1
     }
 }
 ike-group IKEv2 {
     key-exchange ikev2
     lifetime 3600
     proposal 1 {
         dh-group 2
         encryption aes256
         hash sha256
     }
 }
 ipsec-interfaces {
     interface eth0
 }
 nat-networks {
     allowed-network 0.0.0.0/0 {
     }
 }
 site-to-site {
     peer 10.1.2.1 {
         authentication {
             mode pre-shared-secret
             pre-shared-secret sussybaka1337
         }
         default-esp-group ESP
         ike-group IKEv2
         local-address 192.168.16.1
         tunnel 1 {
             esp-group ESP
             local {
                 prefix 192.168.15.0/24
             }
             remote {
                 prefix 10.1.1.0/24
             }
         }
     }
 }