Which option is the default value for the Diffie-Hellman group when configuring a site-to-site VPN on an ASA device?