This object holds the name of the second IKE Phase 2 proposal configured for this tunnel, an alternate set of acceptable IPSec encryption and authentication parameters tried if the first proposal is not accepted by the peer. Admins use multiple fallback proposals to maintain interoperability with peer devices that support different cipher combinations. For example, this field might show "esp-3des-md5" as a fallback proposal if the peer rejects the primary AES-based proposal.