Review the IPsec diagnostics output of the command diag vpn tunnel list shown in the Exhibit below.

Which of the following statements are correct regarding this output? (Select all that apply.)

A.
The connecting client has been allocated address 172.20.1.1.

B.
In the Phase 1 settings, dead peer detection is enabled.

C.
The tunnel is idle.

D.
The connecting client has been allocated address 10.200.3.1.