# $OpenBSD: ipsec.conf,v 1.9 2021/01/20 17:38:18 bluhm Exp $ ### regress ipsec ipsec.conf # Install symmetric config by exchanging local and peer keywords. FROM="from" TO="to" LOCAL="local" PEER="peer" ## ESP # ESP TRANSP flow esp \ $FROM $SRC_ESP_TRANSP_IPV4 $TO $IPS_ESP_TRANSP_IPV4 \ $LOCAL $SRC_ESP_TRANSP_IPV4 $PEER $IPS_ESP_TRANSP_IPV4 \ type dontacq flow esp \ $FROM $SRC_ESP_TRANSP_IPV6 $TO $IPS_ESP_TRANSP_IPV6 \ $LOCAL $SRC_ESP_TRANSP_IPV6 $PEER $IPS_ESP_TRANSP_IPV6 \ type dontacq # ESP TRANSP SA esp transport \ from $SRC_ESP_TRANSP_IPV4 to $IPS_ESP_TRANSP_IPV4 \ spi 0x10000441:0x10000442 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef esp transport \ from $SRC_ESP_TRANSP_IPV6 to $IPS_ESP_TRANSP_IPV6 \ spi 0x10000461:0x10000462 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef # ESP TUNNEL IPS flow esp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $IPS_ESP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $IPS_ESP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq # icmp need to frag flow esp proto icmp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $IPS_IN_IPV4 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $IPS_ESP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $IPS_ESP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # icmp6 too big flow esp proto icmp6 \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $IPS_IN_IPV6 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # ESP TUNNEL ECO flow esp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $ECO_ESP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $ECO_ESP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq # icmp need to frag flow esp proto icmp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $RT_IN_IPV4 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV4/24 $TO $ECO_ESP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq flow esp \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $ECO_ESP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # icmp6 too big flow esp proto icmp6 \ $FROM $SRC_ESP_TUNNEL_IPV6/64 $TO $RT_IN_IPV6 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # ESP TUNNEL SA esp tunnel \ from $SRC_OUT_IPV4 to $IPS_IN_IPV4 \ spi 0x10000841:0x10000842 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef esp tunnel \ from $SRC_OUT_IPV6 to $IPS_IN_IPV6 \ spi 0x10000861:0x10000862 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef ## AH # AH TRANSP flow ah \ $FROM $SRC_AH_TRANSP_IPV4 $TO $IPS_AH_TRANSP_IPV4 \ $LOCAL $SRC_AH_TRANSP_IPV4 $PEER $IPS_AH_TRANSP_IPV4 \ type dontacq flow ah \ $FROM $SRC_AH_TRANSP_IPV6 $TO $IPS_AH_TRANSP_IPV6 \ $LOCAL $SRC_AH_TRANSP_IPV6 $PEER $IPS_AH_TRANSP_IPV6 \ type dontacq # AH TRANSP SA ah transport \ from $SRC_AH_TRANSP_IPV4 to $IPS_AH_TRANSP_IPV4 \ spi 0x10002441:0x10002442 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef ah transport \ from $SRC_AH_TRANSP_IPV6 to $IPS_AH_TRANSP_IPV6 \ spi 0x10002461:0x10002462 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef # AH TUNNEL IPS flow ah \ $FROM $SRC_AH_TUNNEL_IPV4/24 $TO $IPS_AH_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV6/64 $TO $IPS_AH_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV4/24 $TO $IPS_AH_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV6/64 $TO $IPS_AH_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # AH TUNNEL ECO flow ah \ $FROM $SRC_AH_TUNNEL_IPV4/24 $TO $ECO_AH_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV6/64 $TO $ECO_AH_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV4/24 $TO $ECO_AH_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq flow ah \ $FROM $SRC_AH_TUNNEL_IPV6/64 $TO $ECO_AH_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type dontacq # AH TUNNEL SA ah tunnel \ from $SRC_OUT_IPV4 to $IPS_IN_IPV4 \ spi 0x10002841:0x10002842 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef ah tunnel \ from $SRC_OUT_IPV6 to $IPS_IN_IPV6 \ spi 0x10002861:0x10002862 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef ## IPIP # IPIP TRANSP flow ipip \ $FROM $SRC_IPIP_TRANSP_IPV4 $TO $IPS_IPIP_TRANSP_IPV4 \ $LOCAL $SRC_IPIP_TRANSP_IPV4 $PEER $IPS_IPIP_TRANSP_IPV4 \ type use flow ipip \ $FROM $SRC_IPIP_TRANSP_IPV6 $TO $IPS_IPIP_TRANSP_IPV6 \ $LOCAL $SRC_IPIP_TRANSP_IPV6 $PEER $IPS_IPIP_TRANSP_IPV6 \ type use # IPIP TRANSP SA ipip transport \ from $SRC_IPIP_TRANSP_IPV4 to $IPS_IPIP_TRANSP_IPV4 \ spi 0x10004441:0x10004442 ipip transport \ from $SRC_IPIP_TRANSP_IPV6 to $IPS_IPIP_TRANSP_IPV6 \ spi 0x10004461:0x10004462 # IPIP TUNNEL IPS flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV4/24 $TO $IPS_IPIP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV6/64 $TO $IPS_IPIP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV4/24 $TO $IPS_IPIP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV6/64 $TO $IPS_IPIP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use # IPIP TUNNEL ECO flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV4/24 $TO $ECO_IPIP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV6/64 $TO $ECO_IPIP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV4/24 $TO $ECO_IPIP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use flow ipip \ $FROM $SRC_IPIP_TUNNEL_IPV6/64 $TO $ECO_IPIP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use # IPIP TUNNEL SA ipip tunnel \ from $SRC_OUT_IPV4 to $IPS_IN_IPV4 \ spi 0x10004841:0x10004842 ipip tunnel \ from $SRC_OUT_IPV6 to $IPS_IN_IPV6 \ spi 0x10004861:0x10004862 ## IPCOMP # IPCOMP TRANSP flow ipcomp \ $FROM $SRC_IPCOMP_TRANSP_IPV4 $TO $IPS_IPCOMP_TRANSP_IPV4 \ $LOCAL $SRC_IPCOMP_TRANSP_IPV4 $PEER $IPS_IPCOMP_TRANSP_IPV4 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TRANSP_IPV6 $TO $IPS_IPCOMP_TRANSP_IPV6 \ $LOCAL $SRC_IPCOMP_TRANSP_IPV6 $PEER $IPS_IPCOMP_TRANSP_IPV6 \ type use # IPCOMP TRANSP SA ipcomp transport \ from $SRC_IPCOMP_TRANSP_IPV4 to $IPS_IPCOMP_TRANSP_IPV4 \ spi 0x6441:0x6442 ipcomp transport \ from $SRC_IPCOMP_TRANSP_IPV6 to $IPS_IPCOMP_TRANSP_IPV6 \ spi 0x6461:0x6462 # IPCOMP TUNNEL IPS flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV4/24 $TO $IPS_IPCOMP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV6/64 $TO $IPS_IPCOMP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV4/24 $TO $IPS_IPCOMP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV6/64 $TO $IPS_IPCOMP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use # IPCOMP TUNNEL ECO flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV4/24 $TO $ECO_IPCOMP_TUNNEL4_IPV4/24 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV6/64 $TO $ECO_IPCOMP_TUNNEL4_IPV6/64 \ $LOCAL $SRC_OUT_IPV4 $PEER $IPS_IN_IPV4 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV4/24 $TO $ECO_IPCOMP_TUNNEL6_IPV4/24 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use flow ipcomp \ $FROM $SRC_IPCOMP_TUNNEL_IPV6/64 $TO $ECO_IPCOMP_TUNNEL6_IPV6/64 \ $LOCAL $SRC_OUT_IPV6 $PEER $IPS_IN_IPV6 \ type use # IPCOMP TUNNEL SA ipcomp tunnel \ from $SRC_OUT_IPV4 to $IPS_IN_IPV4 \ spi 0x6841:0x6842 ipcomp tunnel \ from $SRC_OUT_IPV6 to $IPS_IN_IPV6 \ spi 0x6861:0x6862 ## BUNDLE # BUNDLE TRANSP flow ipcomp \ $FROM $SRC_BUNDLE_TRANSP_IPV4 $TO $IPS_BUNDLE_TRANSP_IPV4 \ $LOCAL $SRC_BUNDLE_TRANSP_IPV4 $PEER $IPS_BUNDLE_TRANSP_IPV4 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TRANSP_IPV6 $TO $IPS_BUNDLE_TRANSP_IPV6 \ $LOCAL $SRC_BUNDLE_TRANSP_IPV6 $PEER $IPS_BUNDLE_TRANSP_IPV6 \ type dontacq # BUNDLE TRANSP SA ipcomp transport \ from $SRC_BUNDLE_TRANSP_IPV4 to $IPS_BUNDLE_TRANSP_IPV4 \ spi 0x8441:0x8442 \ bundle identifier esp transport \ from $SRC_BUNDLE_TRANSP_IPV4 to $IPS_BUNDLE_TRANSP_IPV4 \ spi 0x10018441:0x10018442 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ah transport \ from $SRC_BUNDLE_TRANSP_IPV4 to $IPS_BUNDLE_TRANSP_IPV4 \ spi 0x10028441:0x10028442 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ipcomp transport \ from $SRC_BUNDLE_TRANSP_IPV6 to $IPS_BUNDLE_TRANSP_IPV6 \ spi 0x8461:0x8462 \ bundle identifier esp transport \ from $SRC_BUNDLE_TRANSP_IPV6 to $IPS_BUNDLE_TRANSP_IPV6 \ spi 0x10018461:0x10018462 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ah transport \ from $SRC_BUNDLE_TRANSP_IPV6 to $IPS_BUNDLE_TRANSP_IPV6 \ spi 0x10028461:0x10028462 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier # BUNDLE TUNNEL IPS flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV4/24 $TO $IPS_BUNDLE_TUNNEL4_IPV4/24 \ $LOCAL $SRC_BUNDLE_IPV4 $PEER $IPS_BUNDLE_IPV4 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV6/64 $TO $IPS_BUNDLE_TUNNEL4_IPV6/64 \ $LOCAL $SRC_BUNDLE_IPV4 $PEER $IPS_BUNDLE_IPV4 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV4/24 $TO $IPS_BUNDLE_TUNNEL6_IPV4/24 \ $LOCAL $SRC_BUNDLE_IPV6 $PEER $IPS_BUNDLE_IPV6 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV6/64 $TO $IPS_BUNDLE_TUNNEL6_IPV6/64 \ $LOCAL $SRC_BUNDLE_IPV6 $PEER $IPS_BUNDLE_IPV6 \ type dontacq # BUNDLE TUNNEL ECO flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV4/24 $TO $ECO_BUNDLE_TUNNEL4_IPV4/24 \ $LOCAL $SRC_BUNDLE_IPV4 $PEER $IPS_BUNDLE_IPV4 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV6/64 $TO $ECO_BUNDLE_TUNNEL4_IPV6/64 \ $LOCAL $SRC_BUNDLE_IPV4 $PEER $IPS_BUNDLE_IPV4 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV4/24 $TO $ECO_BUNDLE_TUNNEL6_IPV4/24 \ $LOCAL $SRC_BUNDLE_IPV6 $PEER $IPS_BUNDLE_IPV6 \ type dontacq flow ipcomp \ $FROM $SRC_BUNDLE_TUNNEL_IPV6/64 $TO $ECO_BUNDLE_TUNNEL6_IPV6/64 \ $LOCAL $SRC_BUNDLE_IPV6 $PEER $IPS_BUNDLE_IPV6 \ type dontacq # BUNDLE TUNNEL SA ipcomp tunnel \ from $SRC_BUNDLE_IPV4 to $IPS_BUNDLE_IPV4 \ spi 0x8841:0x8842 \ bundle identifier esp tunnel \ from $SRC_BUNDLE_IPV4 to $IPS_BUNDLE_IPV4 \ spi 0x10018841:0x10018842 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ah tunnel \ from $SRC_BUNDLE_IPV4 to $IPS_BUNDLE_IPV4 \ spi 0x10028841:0x10028842 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ipcomp tunnel \ from $SRC_BUNDLE_IPV6 to $IPS_BUNDLE_IPV6 \ spi 0x8861:0x8862 \ bundle identifier esp tunnel \ from $SRC_BUNDLE_IPV6 to $IPS_BUNDLE_IPV6 \ spi 0x10018861:0x10018862 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier ah tunnel \ from $SRC_BUNDLE_IPV6 to $IPS_BUNDLE_IPV6 \ spi 0x10028861:0x10028862 \ authkey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ enckey 0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef:0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef \ bundle identifier