See the file man3/ipsec_set_policy.3.