tech-security: setkey config file

Subject: setkey config file
To: None <tech-security@netbsd.org>
From: Ravi Ramamirtham <rrshanks@charter.net>
List: tech-security
Date: 04/10/2003 13:48:22

Hi,
      Can someone please point me to the correct syntax 
for the spdadd command for setkey? I tried the following 
with no luck:

spdadd 10.1.1.1 10.1.1.2 any -P out ipsec 
esp/transport/10.1.1.1-10.1.1.2/require ;

spdadd 10.1.1.2 10.1.1.1 any -P in ipsec 
esp/transport/10.1.1.2-10.1.1.1/require ;

I get the following error:

Invalid argument at [ out ipsec 
esp/transport/10.1.1.1-10.1.1.2/require ]

Thanks

-Ravi