linux CLI commands

swanctl --terminate --ike flex

ip tunnel del ipsec0

ip tunnel add ipsec0 local 172.16.63.65 remote 172.16.63.63 mode vti  key 100
ip link set dev ipsec0 up
    sysctl -w net.ipv4.conf.ipsec0.disable_policy=1
    sysctl -w net.ipv4.conf.ipsec0.rp_filter=0
    sysctl -w net.ipv4.ip_forward=1

 swanctl --load-creds && swanctl --load-conns flex
 swanctl --initiate --child flex

# remote tunnel endpoint
ip route add 172.30.0.254/32 dev ipsec0
# network behind the tunnel
ip route add 192.168.77.0/24 dev ipsec0