diff --git a/sbin/setkey/parse.y b/sbin/setkey/parse.y
index bc944a821098..0693a9642142 100644
--- a/sbin/setkey/parse.y
+++ b/sbin/setkey/parse.y
@@ -672,6 +672,7 @@ portstr
 upper_spec
 	:	DECSTRING { $$ = $1; }
 	|	ANY { $$ = IPSEC_ULPROTO_ANY; }
+	|	PR_TCP { $$ = IPPROTO_TCP; }
 	|	STRING
 		{
 			struct protoent *ent;
diff --git a/usr.sbin/setkey/parse.y b/usr.sbin/setkey/parse.y
index bc944a821098..0693a9642142 100644
--- a/usr.sbin/setkey/parse.y
+++ b/usr.sbin/setkey/parse.y
@@ -672,6 +672,7 @@ portstr
 upper_spec
 	:	DECSTRING { $$ = $1; }
 	|	ANY { $$ = IPSEC_ULPROTO_ANY; }
+	|	PR_TCP { $$ = IPPROTO_TCP; }
 	|	STRING
 		{
 			struct protoent *ent;