If the IPSec policy is configured in the policy template and sub-policy mode, the firewall...

Note: Choose template mode or non-template mode: There are three main modes depending on the characteristics of the peer device: First, remote mobile client access, do not know the client IP address, can not configure remote-address, can only be used Template mode + barbarian mode name authentication; second, communication between two branches, IP address is fixed, non-template mode is used; third, branch office is not fixed IP, then the headquarters uses policy template mode, branch use Strategy mode.