flush;
spdflush;
spdadd 192.168.1.0/24 192.168.2.0/24 any -P in ipsec esp/tunnel/4.3.2.1-1.2.3.4/require;
spdadd 192.168.2.0/24 192.168.1.0/24 any -P out ipsec esp/tunnel/1.2.3.4-4.3.2.1/require;