flow ah from 3ffe:4::/16 to 3ff3:3::/24 peer 3ffe::2 \
	srcid host1.one.net \
	dstid host2.two.net