#!/usr/sbin/setkey -f
flush;
spdflush;

# use ESP for encryption and authentication
add 172.16.0.1 172.16.0.2 esp 1
	-E 3des-cbc "012345678901234567890123"
	-A hmac-md5 "0123456789012345";

add 172.16.0.2 172.16.0.1 esp 2
	-E 3des-cbc "012345678901234567890123"
	-A hmac-md5 "0123456789012345";

spdadd 172.16.0.1 172.16.0.2 any -P out ipsec esp/transport//require;
spdadd 172.16.0.2 172.16.0.1 any -P in  ipsec esp/transport//require;