Basically the same as the one without UDP encapsulation, but here the outbound SAs use random source ports.