0a69452cb4
This patch introduces the BEET mode (Bound End-to-End Tunnel) with as specified by the ietf draft at the following link: http://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-06.txt The patch provides only single family support (i.e. inner family = outer family). Signed-off-by: Diego Beltrami <diego.beltrami@gmail.com> Signed-off-by: Miika Komu <miika@iki.fi> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Abhinav Pathak <abhinav.pathak@hiit.fi> Signed-off-by: Jeff Ahrenholz <ahrenholz@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
48 lines
884 B
C
48 lines
884 B
C
#ifndef _LINUX_IPSEC_H
|
|
#define _LINUX_IPSEC_H
|
|
|
|
/* The definitions, required to talk to KAME racoon IKE. */
|
|
|
|
#include <linux/pfkeyv2.h>
|
|
|
|
#define IPSEC_PORT_ANY 0
|
|
#define IPSEC_ULPROTO_ANY 255
|
|
#define IPSEC_PROTO_ANY 255
|
|
|
|
enum {
|
|
IPSEC_MODE_ANY = 0, /* We do not support this for SA */
|
|
IPSEC_MODE_TRANSPORT = 1,
|
|
IPSEC_MODE_TUNNEL = 2,
|
|
IPSEC_MODE_BEET = 3
|
|
};
|
|
|
|
enum {
|
|
IPSEC_DIR_ANY = 0,
|
|
IPSEC_DIR_INBOUND = 1,
|
|
IPSEC_DIR_OUTBOUND = 2,
|
|
IPSEC_DIR_FWD = 3, /* It is our own */
|
|
IPSEC_DIR_MAX = 4,
|
|
IPSEC_DIR_INVALID = 5
|
|
};
|
|
|
|
enum {
|
|
IPSEC_POLICY_DISCARD = 0,
|
|
IPSEC_POLICY_NONE = 1,
|
|
IPSEC_POLICY_IPSEC = 2,
|
|
IPSEC_POLICY_ENTRUST = 3,
|
|
IPSEC_POLICY_BYPASS = 4
|
|
};
|
|
|
|
enum {
|
|
IPSEC_LEVEL_DEFAULT = 0,
|
|
IPSEC_LEVEL_USE = 1,
|
|
IPSEC_LEVEL_REQUIRE = 2,
|
|
IPSEC_LEVEL_UNIQUE = 3
|
|
};
|
|
|
|
#define IPSEC_MANUAL_REQID_MAX 0x3fff
|
|
|
|
#define IPSEC_REPLAYWSIZE 32
|
|
|
|
#endif /* _LINUX_IPSEC_H */
|