ipsec_check_action
return (ipsec_check_action(act, diag, spds->spds_netstack));
extern boolean_t ipsec_check_action(ipsec_act_t *, int *, netstack_t *);