! Galion Systems — Walnut Creek WTP VPN tunnel
! Cisco ASA 5506-X  IOS 9.12(4)

tunnel-group GALION-WALNUT type ipsec-l2l
tunnel-group GALION-WALNUT ipsec-attributes
 ikev2 remote-authentication pre-shared-key [REDACTED]
 ikev2 local-authentication pre-shared-key [REDACTED]

crypto map OUTSIDE_MAP 10 set peer 198.51.100.14
! SCADA subnet: 10.10.1.0/24
access-list GALION-WALNUT-ACL extended permit ip 10.10.1.0 255.255.255.0 172.16.0.0 255.255.255.0