TOK_permit
{"permit", TOK_permit, SPD_ACTTYPE_IPSEC},
case TOK_permit:
iap->iap_act_tok == TOK_permit) {