This test has a road warrior, ("road") connecting to VPN host east.

It shows up from a random IP.

Road has forceencaps=yes, so even though there is no NAT happening, we
should still do a NAT-T ESPinUDP encaps connection to east.

East has a default config, without forceencaps=yes