HP-UX IPSec version A.02.01 Administrator's Guide

Troubleshooting HP-UX IPSec
IPsec Operation
Chapter 7 197
SA uses manual keys, HP-UX IPSec also verifies that the SA SPI for the
tunnel policy referenced in the host or gateway policy matches the SPI in
the outer (tunnel) packet.