crypto ikev2 keyring GCP_KEYS
 peer GCP_TUNNEL_1
  address 34.148.64.195
  pre-shared-key local T5U7GCljSzr05njYQuDgL3quzeoupF55
  pre-shared-key remote T5U7GCljSzr05njYQuDgL3quzeoupF55

crypto ikev2 keyring GCP_KEYS
 peer GCP_TUNNEL_2
  address 34.138.178.27
  pre-shared-key local T5U7GCljSzr05njYQuDgL3quzeoupF55
  pre-shared-key remote T5U7GCljSzr05njYQuDgL3quzeoupF55


 crypto ikev2 proposal IKEV2_PROPOSAL_GCP 
 encryption aes-gcm-256
 prf sha256
 group 14

crypto ikev2 policy IKEV2_POLICY_GCP
 match address local 204.186.19.10
 proposal IKEV2_PROPOSAL_GCP

crypto ikev2 profile IKEV2_PROFILE_GCP
 match address local interface GigabitEthernet1
 match identity remote address 34.148.64.195 255.255.255.255 
 match identity remote address 34.138.178.27 255.255.255.255 
  identity local address 204.186.19.10
 authentication remote pre-share
 authentication local pre-share
 keyring local GCP_KEYS
 dpd 10 2 on-demand

crypto ipsec transform-set TS_GCP esp-gcm 256 
 mode tunnel

crypto ipsec profile IPSEC_PROFILE_GCP
 set security-association lifetime seconds 27000
 set transform-set TS_GCP
 set ikev2-profile IKEV2_PROFILE_GCP

interface Tunnel5
 description TO_GCP_TUNNEL_1
 ip address 169.254.0.5 255.255.255.255
 ip mtu 1400
 ip tcp adjust-mss 1360
 tunnel source GigabitEthernet1
 tunnel mode ipsec ipv4
 tunnel destination 34.148.64.195
 tunnel protection ipsec profile IPSEC_PROFILE_GCP

interface Tunnel6
 description TO_GCP_TUNNEL_1
 ip address 169.254.0.6 255.255.255.255
 ip mtu 1400
 ip tcp adjust-mss 1360
 tunnel source GigabitEthernet1
 tunnel mode ipsec ipv4
 tunnel destination 34.138.178.27
 tunnel protection ipsec profile IPSEC_PROFILE_GCP