Configuring IPsec with ipsecctl(8)

List expansion allows ipsecctl to scale well


bsd_nets="{ 10.0.1.0/24 10.0.2.0/24 172.16.221.0/24 10.1.0.0/26 }"

ike esp from egress to $bsd_nets peer 1.1.1.1 srcid msf@openbsd.org dstid gwA.openbsd.org