flow ah out from 4.4.0.0/16 to 3.3.3.0/24 peer 2.2.2.2 \
	srcid host1.one.net \
	dstid host2.two.net
flow ah in from 3.3.3.0/24 to 4.4.0.0/16 peer 2.2.2.2 \
	srcid host1.one.net \
	dstid host2.two.net