east:~#
 TZ=GMT export TZ
east:~#
 ipsec spi --clear
east:~#
 ipsec eroute --clear
east:~#
 enckey=0x4043434545464649494a4a4c4c4f4f515152525454575758
east:~#
 authkey=0x87658765876587658765876587658765
east:~#
 ipsec spi --saref --af inet --edst 192.1.2.45 --spi 0x12345678 --proto esp --src 192.1.2.23 --esp 3des-md5-96 --enckey $enckey --authkey $authkey
/usr/local/libexec/ipsec/spi: saref=3
east:~#
 ipsec spi --saref --af inet --edst 192.1.2.45 --spi 0x12345678 --proto tun --src 192.1.2.23 --dst 192.1.2.45 --ip4
/usr/local/libexec/ipsec/spi: saref=4
east:~#
 ipsec spigrp inet 192.1.2.45 0x12345678 tun inet 192.1.2.45 0x12345678 esp 
east:~#
 ipsec spi --saref --af inet --edst 192.1.2.44 --spi 0x23456789 --proto esp --src 192.1.2.23 --esp 3des-md5-96 --enckey $enckey --authkey $authkey
/usr/local/libexec/ipsec/spi: saref=5
east:~#
 ipsec spi --saref --af inet --edst 192.1.2.44 --spi 0x23456789 --proto tun --src 192.1.2.23 --dst 192.1.2.44 --ip4
/usr/local/libexec/ipsec/spi: saref=6
east:~#
 ipsec spigrp inet 192.1.2.44 0x23456789 tun inet 192.1.2.44 0x23456789 esp 
east:~#
 ipsec eroute
east:~#
 ipsec eroute --add --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x12345678@192.1.2.45
east:~#
 : added
east:~#
 ipsec eroute
0          192.0.2.0/24       -> 192.0.1.0/24       => tun0x12345678@192.1.2.45
east:~#
 ipsec eroute --del --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x12345678@192.1.2.45
east:~#
 : removed
east:~#
 ipsec eroute
east:~#
 ipsec eroute --add --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x12345678@192.1.2.45
east:~#
 : added
east:~#
 ipsec eroute
0          192.0.2.0/24       -> 192.0.1.0/24       => tun0x12345678@192.1.2.45
east:~#
 ipsec eroute --replace --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x23456789@192.1.2.44
east:~#
 : replaced
east:~#
 ipsec eroute
0          192.0.2.0/24       -> 192.0.1.0/24       => tun0x23456789@192.1.2.44
east:~#
 ipsec eroute --del --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x12345678@192.1.2.44
east:~#
 : removed
east:~#
 ipsec eroute
east:~#
 ipsec eroute --replace --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x23456789@192.1.2.44
east:~#
 : replaced again
east:~#
 ipsec eroute
0          192.0.2.0/24       -> 192.0.1.0/24       => tun0x23456789@192.1.2.44
east:~#
 echo done
done
east:~#
 ipsec setup stop
ipsec_setup: Stopping Libreswan IPsec...
ipsec_setup: stop ordered, but IPsec appears to be already stopped!
ipsec_setup: doing cleanup anyway...
east:~#
 kill `cat /var/run/klogd.pid`; cat /tmp/klog.log
klogd 1.3-3#33.1, log source = /proc/kmsg started.
east:~#
 halt -p -f
System halted.