flow ah out from 3ffe::1 to 3ffe::2 peer 3ffe::2 srcid host1.one.net dstid host2.two.net type require flow ah in from 3ffe::2 to 3ffe::1 peer 3ffe::2 srcid host1.one.net dstid host2.two.net type require