#
# IPSec Tunnel
# Name: <%= @title %>
#
<%- @nets.each do |net| -%>
<%- @netproto = net['proto'] ? net['proto'] : 'any' -%>

spdadd <%= net['local'] %> <%= net['remote'] %> <%= @netproto %> -P out ipsec 
	esp/tunnel/<%= @local_ip %>-<%= @remote_ip %>/require;
spdadd <%= net['remote'] %> <%= net['local'] %> <%= @netproto %> -P in ipsec 
	esp/tunnel/<%= @remote_ip %>-<%= @local_ip %>/require;
<%- end -%>