122514Sdarrenr#
222514Sdarrenr# drop all packets without IP security options
322514Sdarrenr#
422514Sdarrenrblock in all
522514Sdarrenrpass in all with opt sec
622514Sdarrenr#
7102521Sdarrenr# only allow packets in and out on le1 which are top secret
822514Sdarrenr#
922514Sdarrenrblock out on le1 all
1022514Sdarrenrpass out on le1 all with opt sec-class topsecret
1122514Sdarrenrblock in on le1 all
1222514Sdarrenrpass in on le1 all with opt sec-class topsecret
13