An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices.

Which configuration steps must be performed on both units to support this scenario? (Choose three.)

A. Define the phase 2 parameters.

B. Set the phase 2 encapsulation method to transport mode.

C. Define at least one firewall policy, with the action set to IPsec.

D. Define a route to the remote network over the IPsec tunnel.

E. Define the phase 1 parameters, without enabling IPsec interface mode.