Configuring IPsec with ipsecctl(8)

roaming user example

my laptop:
ike esp from egress to 10.0.1.0/24 peer 1.1.1.1 \ 
    srcid msf@openbsd.org dstid gwA.openbsd.org

gwA:
ike passive esp from 10.0.1.0/24 to any srcid gwA.openbsd.org