PATH="/usr/local/sbin:/sbin:/usr/sbin:/usr/local/bin:/bin:/usr/bin"
export PATH
ipsec whack --name OEnet --encrypt --tunnel --pfs --ikelifetime "3600" --rsasig \
	--host "192.1.2.23" --client "192.0.2.0/24" --nexthop "192.1.2.254" --updown "ipsec _updown"  --dnskeyondemand \
	--to --host "%opportunistic"  --nexthop "%direct" --updown "ipsec _updown"   \
	--ipseclifetime "3600" --rekeymargin "540" \
	--keyingtries "3"  --dontrekey  \
	|| exit $?
PATH="/usr/local/sbin:/sbin:/usr/sbin:/usr/local/bin:/bin:/usr/bin"
export PATH
ipsec whack --name OEself --encrypt --tunnel --pfs --ikelifetime "3600" --rsasig \
	--host "192.1.2.23"  --nexthop "192.1.2.254" --updown "ipsec _updown"  --dnskeyondemand \
	--to --host "%opportunistic"  --nexthop "%direct" --updown "ipsec _updown"   \
	--ipseclifetime "3600" --rekeymargin "540" \
	--keyingtries "3"  --dontrekey  \
	|| exit $?