1. Tunnel modus um zwei netze zu verbinden

 1.!/usr/sbin/setkey -f

 1. Flush the SAD and SPD
flush;
spdflush;

 1. Attention: Use this keys only for testing purposes!
 1. Generate your own keys!

 1. AH SAs using 128 bit long keys
 1.add 172.20.15.93 172.20.2.206 ah 0x200 -A hmac-md5 0xc0291ff014dccdd03874d9e8e4cdf3e6;
 1.add 172.20.2.206 172.20.15.93 ah 0x300 -A hmac-md5 0x96358c90783bbfa3d7b196ceabe0536b;

  1.DEBUG
 1.add 172.20.15.93 172.20.2.206 ah 0x200 -A null;
 1.add 172.20.2.206 172.20.15.93 ah 0x300 -A null;

 1. ESP SAs using 192 bit long keys (168 + 24 parity)
add  172.20.15.93 172.20.2.206 esp 0x201 -m tunnel -E twofish-cbc 0x7aeaca3f87d060a12f4a4487d5a5c3355920fae69a96c8
31;
add 172.20.2.206 172.20.15.93 esp 0x301 -m tunnel -E twofish-cbc 0xf6ddb555acfd9d77b03ea3843f2653255afe8eb5573965d
f;

  1.DEBUG
 1.add  172.20.15.93 172.20.2.206 esp 0x201 -m tunnel -E simple "";
 1.add 172.20.2.206 172.20.15.93 esp 0x301 -m tunnel -E simple "";

 1. Security policies
spdadd 172.20.15.93 172.20.2.206 any -P in ipsec
`          esp/tunnel/172.20.15.93-172.20.2.206/require;`
`               #ah/tunnel/172.20.98.246-172.20.2.206/require;`

spdadd 172.20.2.206 172.20.15.93 any -P out ipsec
`          esp/tunnel/172.20.2.206-172.20.15.93/require;`
`               #ah/tunnel/172.20.98.246-172.20.2.206/require;`