Configuring IPsec with ipsecctl(8)

Reasonable defaults

ike esp from 192.168.0.1 to 192.168.0.2

Really means

ike esp tunnel from 192.168.0.1 to 192.168.0.2 peer 192.168.0.2 \ 
    main auth hmac-sha1 enc aes group modp1024 \ 
    quick auth hmac-sha2-256 enc aes group modp1024 \ 
    srcid 192.168.0.1 dstid 192.168.0.2