#ipsec policy for mobile node 10.0.0.1
#HA (ipsec server/gateway thingee) is 10.0.0.2 
#note: these crypto keys are not the best :->
setkey -c <<EOF
spdadd 0.0.0.0/0 10.0.0.1/32 any -P out ipsec
esp/tunnel/10.0.0.2-10.0.0.1/require;
spdadd 10.0.0.1/32 10.0.0.2/32 any -P in ipsec
esp/tunnel/10.0.0.1-10.0.0.2/require;
add 10.0.0.1 10.0.0.2 esp 7000 -E blowfish-cbc "beefdeadbeefdeadbeefdead";
add 10.0.0.2 10.0.0.1 esp 7001 -E blowfish-cbc "deadbeefdeadbeefdeadbeef";
EOF

#ipsec policy for a 2nd mobile node 10.0.0.3
setkey -c <<EOF
spdadd 0.0.0.0/0 10.0.0.3/32 any -P out ipsec
esp/tunnel/10.0.0.2-10.0.0.3/require;
spdadd 10.0.0.3/32 10.0.0.2/32 any -P in ipsec
esp/tunnel/10.0.0.3-10.0.0.2/require;
add 10.0.0.3 10.0.0.2 esp 7002 -E blowfish-cbc "beefdeadbeefdeadbeefdead";
add 10.0.0.2 10.0.0.3 esp 7003 -E blowfish-cbc "deadbeefdeadbeefdeadbeef";
EOF