KAME implementation

Key management
Manual: setkey(8)
Automatic: racoon(8)

Policy management
Packet filter: setkey(8)
Outbound socket: telnet(1), ping(8) and others
Inbound socket: inetd(8), sendmail(8)

$ setkey -c <<EOF
add 10.1.1.1 10.1.1.2 esp 9998 -E des-cbc "hogehoge";
add 10.1.1.2 10.1.1.1 esp 9999 -E des-cbc "mogamoga";
^D
$ telnet -P 'out ipsec esp/transport/10.1.1.1-10.1.1.2/use' 10.1.1.2

$ setkey -c <<EOF
spdadd 10.1.1.1 10.1.1.2 any -P out ipsec esp/transport/127.0.0.1-127.0.0.1/use ah/transport/127.0.0.1-127.0.0.1/use;
^D
$ telnet 10.1.1.2