/ ip ipsec policy
add src-address=[your ip address]/32:any dst-address=10.10.1.0/24:any
    protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes
    sa-src-address=[ip router] sa-dst-address=203.130.231.5
    proposal=abacus manual-sa=none dont-fragment=clear disabled=no

/ ip ipsec peer
add address=203.130.231.5/32:0 secret="[secret key nya di sini]"
    generate-policy=yes
    exchange-mode=main send-initial-contact=yes proposal-check=obey
    hash-algorithm=md5 enc-algorithm=des dh-group=modp768 lifetime=1d
    lifebytes=0 disabled=no

/ ip ipsec proposal
add name="abacus" auth-algorithms=md5 enc-algorithms=des lifetime=1d
    lifebytes=0 pfs-group=none disabled=no