HP-UX IPSec version A.02.00 Administrator's Guide

Troubleshooting HP-UX IPSec
IPSec Operation
Chapter 5154
SA uses manual keys, HP-UX IPSec also verifies that the SA SPI for the
tunnel policy referenced in the host or gateway policy matches the SPI in
the outer (tunnel) packet.