create_sa
struct ipsec_rule *create_sa(u_int8_t, u_int8_t, struct ipsec_hosts *,
r = create_sa(IPSEC_TCPMD5, IPSEC_TRANSPORT, &$2,
r = create_sa($1, $2, &$3, $4.spiout, $5.encap, $5.port,