ipsec: CLI improvement for udp port encap