diff --git a/share/man/man4/ip.4 b/share/man/man4/ip.4
index c53cd3d5aed..24b06846e66 100644
--- a/share/man/man4/ip.4
+++ b/share/man/man4/ip.4
@@ -28,7 +28,7 @@
 .\"     @(#)ip.4	8.2 (Berkeley) 11/30/93
 .\" $FreeBSD$
 .\"
-.Dd May 24, 2020
+.Dd August 9, 2021
 .Dt IP 4
 .Os
 .Sh NAME
@@ -109,6 +109,15 @@ int ttl = 60;                   /* max = 255 */
 setsockopt(s, IPPROTO_IP, IP_TTL, &ttl, sizeof(ttl));
 .Ed
 .Pp
+.Dv IP_IPSEC_POLICY
+controls IPSec policy for sockets.
+For example,
+.Bd -literal
+const char *policy = "in ipsec ah/transport//require";
+char *buf = ipsec_set_policy(policy, strlen(policy));
+setsockopt(s, IPPROTO_IP, IP_IPSEC_POLICY, buf, ipsec_get_policylen(buf));
+.Ed
+.Pp
 .Dv IP_MINTTL
 may be used to set the minimum acceptable TTL a packet must have when
 received on a socket.