if_ipsec_ioctl
sc->ipsec_if.if_ioctl = if_ipsec_ioctl;
int if_ipsec_ioctl(struct ifnet *, u_long, void *);