diff --git a/tools/build/options/WITHOUT_IPSEC_SUPPORT b/tools/build/options/WITHOUT_IPSEC_SUPPORT
new file mode 100644
index 000000000000..349c2b5de35e
--- /dev/null
+++ b/tools/build/options/WITHOUT_IPSEC_SUPPORT
@@ -0,0 +1,7 @@
+.\" $FreeBSD$
+Set to not build the kernel with
+.Xr ipsec 4
+support. This option is needed for
+.Xr ipsec 4
+and
+.Xr tcpmd5 4 .