IPSEC_LEVEL_REQUIRE
rq->sadb_x_ipsecrequest_level = IPSEC_LEVEL_REQUIRE;
(mp->reqid ? IPSEC_LEVEL_UNIQUE : IPSEC_LEVEL_REQUIRE),