The eroute is the object that represents an entry in the IPsec SPD.
This structure will be extended with additional selectors to support requirement 11 (see 4.11).