How to deploy this default config?

Please refer to "NCP Configuration setup guide.pdf", document #4118774, posted on The Source
For quick instructions, please follow the following steps:

step 1: Transfer the ncpphone.cfg file to the laptop and copy it to C:\Program Files\NCP\SecureClient\

step 2: On the ncpphone.cfg, both the IKE and ESP proposal are AES256_Sha256_DH14.

step 3. On the ACM side, create the corresponding IKE proposal on ACM side. The example:
admin@ACM# show vpn ipsec ike-group
 ike-group ike_g1 {
     dead-peer-detection {
         action clear
     }
     ike-version ikev2
     mobike yes
     proposal 1 {
         dh-group 14
         encryption aes256
         hash sha2_256
     }
 }

step 4. On the ACM side, create the corresponding ESP proposal on ACM side. The example:
admin@ACM# show vpn ipsec esp-group
 esp-group esp_g1 {
     mode tunnel
     proposal 1 {
         dh-group 14
         encryption aes256
         hash sha2_256
     }
 }

step 5. On the NCP client, enter the ACM IP address on the  IPsec General Setting

step 6. On the NCP client, the "FQDN" mode is suggested as Identities. Then setup the "ID" and "Share Secret"

step 7. On the ACM side, create a peer matching "ID" in NCP client. For example:
        *If the "FQDN" mode is set on the NCP client, the peer name on ACM side is start with "@" and plus "ID". 
	*If the "IP" mode is set on the NCP client, the peer name on ACM side is the NCP IP address: x.x.x.x