CONFIG_IP_NF_MATCH_AH_ESP
Policy match support
CONFIG_IP_NF_MATCH_POLICY
  Policy matching allows you to match packets based on the
  IPsec policy that was used during decapsulation/will
  be used during encapsulation.

  To compile it as a module, choose M here.  If unsure, say N.

Policy match support
CONFIG_IP6_NF_MATCH_POLICY
  Policy matching allows you to match packets based on the
  IPsec policy that was used during decapsulation/will
  be used during encapsulation.

  To compile it as a module, choose M here.  If unsure, say N.

