1*7c478bd9Sstevel@tonic-gate# 2*7c478bd9Sstevel@tonic-gate# drop all packets without IP security options 3*7c478bd9Sstevel@tonic-gate# 4*7c478bd9Sstevel@tonic-gateblock in all 5*7c478bd9Sstevel@tonic-gatepass in all with opt sec 6*7c478bd9Sstevel@tonic-gate# 7*7c478bd9Sstevel@tonic-gate# only allow packets in and out on le1 which are top secret 8*7c478bd9Sstevel@tonic-gate# 9*7c478bd9Sstevel@tonic-gateblock out on le1 all 10*7c478bd9Sstevel@tonic-gatepass out on le1 all with opt sec-class topsecret 11*7c478bd9Sstevel@tonic-gateblock in on le1 all 12*7c478bd9Sstevel@tonic-gatepass in on le1 all with opt sec-class topsecret 13