# ip xfrm state list
src pub.lic.ip.A dst pub.lic.ip.B
	proto esp spi 0x00000400 reqid 0 mode tunnel
	replay-window 0 
	mark 12032/0xff00
	auth-trunc hmac(sha1) 0x2ea6eefd6c7e1f41dfd047ad83d2d11f46428a4f 96
	enc cbc(des3_ede) 0x394517be5524859ce745e158e3c7d47c033fe519bb882496
	sel src 0.0.0.0/0 dst 0.0.0.0/0 
src pub.lic.ip.B dst pub.lic.ip.A
	proto esp spi 0x00000401 reqid 0 mode tunnel
	replay-window 0 
	mark 12032/0xff00
	auth-trunc hmac(sha1) 0xbf11eda9dcce27e8ca2156d2a0fb3ce3d31251bf 96
	enc cbc(des3_ede) 0x346c928bae81ed623dca2b8d2b16365c91daf629076692e0
	sel src 0.0.0.0/0 dst 0.0.0.0/0 

# ip xfrm policy list
src 192.168.0.0/24 dst 172.20.8.0/24 
	dir fwd priority 0 ptype main 
	mark 12032/0xff00
	tmpl src pub.lic.ip.A dst pub.lic.ip.B
		proto esp reqid 0 mode tunnel
src 192.168.0.0/24 dst 172.20.8.0/24 
	dir in priority 0 ptype main 
	mark 12032/0xff00
	tmpl src pub.lic.ip.A dst pub.lic.ip.B
		proto esp reqid 0 mode tunnel
src 172.20.8.0/24 dst 192.168.0.0/24 
	dir out priority 0 ptype main 
	mark 12032/0xff00
	tmpl src pub.lic.ip.B dst pub.lic.ip.A
		proto esp reqid 0 mode tunnel