An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices configuration steps must be performed on both devices to support this scenario? (Choose three.) 〖管理员希望在两个FortiGate设备之间创建基于策略的IPsec VPN隧道，必须在两个设备上执行什么配置步骤才能支持此场景?(选择三个)〗
A. Define the phase 1 parameters, without enabling IPsec interface mode.〖定义阶段1参数，但不启用IPsec接口模式〗
B. Define the phase 2 parameters.〖定义阶段2参数。〗
C. Set the phase 2 encapsulation method to transport mode.〖将第2阶段封装方法设置为传输模式。〗
D. Define at least one firewall policy, with the action set to IPsec.〖定义至少一个防火墙策略，操作设置为IPsec。〗
E. Define a route to the remote network over the IPsec tunnel.〖定义通过IPsec隧道到远程网络的路由。〗
