test phase2={esp,ah}, more correctly called encap-prot, using whack and addconn
