flow esp out from 3ffe:1::/16 to 3ffe:2::/24 peer 3ffe::2 srcid host1.one.net dstid host2.two.net type require
flow esp in from 3ffe:1::/24 to 3ffe:2::/16 peer 3ffe::2 srcid host1.one.net dstid host2.two.net type require