(racoon 910) Help Beginner question ......

Beginer question !

How do i run certificates on all ports except one ?

I have tried:

flush;
spdflush;
spdadd 0.0.0.0/0 XXX.XXX.XXX.XXX/32[22] any -P in none;
spdadd XXX.XXX.XXX.XXX[22]  0.0.0.0/0[0] any -P out none;

#Force all other clients to use ipsec !
spdadd 0.0.0.0/0[any] XXX.XXX.XXX.XXX[any] any -P in ipsec 
esp/transport//require ah/transport//require;
spdadd XXX.XXX.XXX.XXX[any] 0.0.0.0/0[any] any -P out ipsec 
esp/transport//require ah/transport//require;

Thanks
Kappen