remote box 
63.147.76.30 netmask 0xffffffc0 broadcast 63.147.76.63
192.168.241.15 netmask 0xffffff00 broadcast 192.168.241.255

ike esp from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.124
ike esp from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.124 
ike esp from 63.147.76.30 to 71.196.227.124

# ipsecctl -sf                                                                                
flow esp in from 10.50.3.0/24 to 192.168.0.0/16 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type use
flow esp out from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type require
flow esp in from 10.50.3.0/24 to 63.147.76.30 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type use
flow esp out from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type require

# netstat -rnf encap
Routing tables

Encap:
Source             Port  Destination        Port  Proto SA(Address/Proto/Type/Direction)
10.50.3/24         0     192.168/16         0     0     71.196.227.124/esp/use/in
192.168/16         0     10.50.3/24         0     0     71.196.227.124/esp/require/out
10.50.3/24         0     63.147.76.30/32    0     0     71.196.227.124/esp/use/in
63.147.76.30/32    0     10.50.3/24         0     0     71.196.227.124/esp/require/out

local box:
71.196.227.124 netmask 0xfffffe00 broadcast 255.255.255.255
10.50.3.2 netmask 0xffffff00 broadcast 10.50.3.255

# ipsecctl -sf                                                                                          
flow esp in from 192.168.0.0/16 to 10.50.3.0/24 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type use
flow esp out from 10.50.3.0/24 to 192.168.0.0/16 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type require
flow esp in from 63.147.76.30 to 10.50.3.0/24 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type use
flow esp out from 10.50.3.0/24 to 63.147.76.30 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type require

# netstat -rnf encap
Routing tables

Encap:
Source             Port  Destination        Port  Proto SA(Address/Proto/Type/Direction)
192.168/16         0     10.50.3/24         0     0     63.147.76.30/esp/use/in
10.50.3/24         0     192.168/16         0     0     63.147.76.30/esp/require/out
63.147.76.30/32    0     10.50.3/24         0     0     63.147.76.30/esp/use/in
10.50.3/24         0     63.147.76.30/32    0     0     63.147.76.30/esp/require/out