ike ah transport proto udp from 1.1.1.1 port ntp to any
