The source for the destination IP address value to be used
in the SA. 'packet' limits use of the SA to those packets
which have a matching IP addr even if the policy permits a
range. 'policy' allows more than one traffic flow to use
the SA if the policy permits a range of IP addresses.