IPSEC_TUNNEL
case IPSEC_TUNNEL:
uint8_t tmode = IPSEC_TUNNEL;
tmode : /* empty */ { $$ = IPSEC_TUNNEL; }
| TUNNEL { $$ = IPSEC_TUNNEL; }
IPSEC_TUNNEL : IPSEC_TRANSPORT;
if (satype != SADB_X_SATYPE_IPIP && tmode == IPSEC_TUNNEL)