# ipsec in reqid 1 ip ipsec-ip4 ipsec-input [ xfrm load in 0 reqid => reg 1 ] [ cmp eq reg 1 0x00000001 ] # ipsec in spnum 0 reqid 1 ip ipsec-ip4 ipsec-input [ xfrm load in 0 reqid => reg 1 ] [ cmp eq reg 1 0x00000001 ] # ipsec out reqid 0xffffffff ip ipsec-ip4 ipsec-input [ xfrm load out 0 reqid => reg 1 ] [ cmp eq reg 1 0xffffffff ] # ipsec out spi 1-561 inet ipsec-inet ipsec-post [ xfrm load out 0 spi => reg 1 ] [ cmp gte reg 1 0x01000000 ] [ cmp lte reg 1 0x31020000 ] # ipsec in spnum 2 ip saddr { 1.2.3.4, 10.6.0.0/16 } __set%d ipsec-ip4 7 size 5 __set%d ipsec-ip4 0 element 00000000 : 1 [end] element 04030201 : 0 [end] element 05030201 : 1 [end] element 0000060a : 0 [end] element 0000070a : 1 [end] ip ipsec-ip4 ipsec-input [ xfrm load in 2 saddr4 => reg 1 ] [ lookup reg 1 set __set%d ] # ipsec in ip6 daddr dead::beef ip ipsec-ip4 ipsec-forw [ xfrm load in 0 daddr6 => reg 1 ] [ cmp eq reg 1 0x0000adde 0x00000000 0x00000000 0xefbe0000 ] # ipsec out ip6 saddr dead::feed ip ipsec-ip4 ipsec-forw [ xfrm load out 0 saddr6 => reg 1 ] [ cmp eq reg 1 0x0000adde 0x00000000 0x00000000 0xedfe0000 ] # counter ipsec out ip daddr 192.168.1.2 ip ipsec-ip4 ipsec-forw [ counter pkts 0 bytes 0 ] [ xfrm load out 0 daddr4 => reg 1 ] [ cmp eq reg 1 0x0201a8c0 ]