| Argument | Type | Description |
|---|
| name ( mandatory ) | string | |
| responder | bool | peer shoud request or send the config |
| system-dns | bool | send system dns servers to peer |
| static-dns | object { address: alt { address4: ipAddr
}
} | dns servers sent to peer, exclusive with system-dns |
| address | ipAddr | |
| address-pool | enum (none) { none:-1 } | issue one address for peer from this pool |
| address-prefix-length | num | issued address netmask |
| split-include | object { subnet: alt { subnet4: ipPrefix
}
} | additional protected subnets |
| split-dns | multi { array-id, dns: string
} | DNS name to be resolved using internal server |
| src-address-list | enum () | address list name to be added to srcnat chain for initiator |
| connection-mark | enum () | conection-mark to be added to srcnat chain for initiator |
| use-responder-dns | enum (no | yes | exclusively) | if the dns servers sent should be used by the initiator |