flush;
spdflush;


spdadd 192.168.100.2/32 10.0.0.2/32  any -P out ipsec
   esp/tunnel/192.168.100.2-192.168.100.100/require;

spdadd 10.0.0.2/32 192.168.100.2/32 any -P in ipsec
   esp/tunnel/192.168.100.100-192.168.100.2/require;