diff --git a/sys/netipsec/ipsec.h b/sys/netipsec/ipsec.h
index eea0a39af5e..8e18d637895 100644
--- a/sys/netipsec/ipsec.h
+++ b/sys/netipsec/ipsec.h
@@ -93,7 +93,7 @@ struct secpolicy {
 	uint32_t id;			/* It's unique number on the system. */
 	/*
 	 * lifetime handler.
-	 * the policy can be used without limitiation if both lifetime and
+	 * the policy can be used without limitation if both lifetime and
 	 * validtime are zero.
 	 * "lifetime" is passed by sadb_lifetime.sadb_lifetime_addtime.
 	 * "validtime" is passed by sadb_lifetime.sadb_lifetime_usetime.