#!/usr/sbin/setkey -f
#
# THIS IS A SAMPLE FILE!
#
# This is a sample file to test Gentoo's ipsec-tools out of the box.
# Do not use it in production.  See: http://www.ipsec-howto.org/
#
flush;
spdflush;

spdadd Y.Y.Y.Y/32 X2.X2.X2.X2/32 any -P out ipsec esp/tunnel/Y.Y.Y.Y-X1.X1.X1.X1/require;
spdadd X2.X2.X2.X2/32 Y.Y.Y.Y/32 any -P in  ipsec esp/tunnel/X1.X1.X1.X1-Y.Y.Y.Y/require;