[admin@V\E4nge RV] /ip ipsec policy> print
Flags: T - template, X - disabled, D - dynamic, I - invalid, A - active,
* - default
 0 T * group=default src-address=::/0 dst-address=::/0 protocol=all
       proposal=default template=yes

 1  A  src-address=172.16.11.240/29 src-port=any dst-address=172.16.0.0/16
       dst-port=any protocol=all action=encrypt level=require
       ipsec-protocols=esp tunnel=yes sa-src-address=138.6.33.148
       sa-dst-address=192.176.238.228 proposal=default ph2-count=1