enc_if="enc0"

table <esp> { 82.229.223.133 }

# IPsec isakmp/IKE Key Exchange Method (passive)
pass in quick on $ext_if inet proto udp from <esp> to ($ext_if) port isakmp keep state
# IPsec flow / esp
pass in quick on $ext_if inet proto esp from <esp> to ($ext_if)
pass out quick on $ext_if inet proto esp from ($ext_if) to <esp>
# IPsec ipencap
pass in quick on $enc_if inet proto ipencap