#!/usr/sbin/setkey -f

flush;
spdflush;

flush;
spdflush;
spdadd X2.X2.X2.X2/32 Y1.Y1.Y1.Y1/32 any -P out ipsec esp/tunnel/X2.X2.X2.X2-X1.X1.X1.X1/require;
spdadd Y1.Y1.Y1.Y1/32 X2.X2.X2.X2/32 any -P in  ipsec esp/tunnel/X1.X1.X1.X1-X2.X2.X2.X2/require;