include/linux/ipsec.h

   1 #ifndef _LINUX_IPSEC_H
   2 #define _LINUX_IPSEC_H
   3
   4 /* The definitions, required to talk to KAME racoon IKE. */
   5
   6 #include <linux/pfkeyv2.h>
   7
   8 #define IPSEC_PORT_ANY          0
   9 #define IPSEC_ULPROTO_ANY       255
  10 #define IPSEC_PROTO_ANY         255
  11
  12 enum {
  13         IPSEC_MODE_ANY          = 0,    /* We do not support this for SA */
  14         IPSEC_MODE_TRANSPORT    = 1,
  15         IPSEC_MODE_TUNNEL       = 2,
  16         IPSEC_MODE_BEET         = 3
  17 };
  18
  19 enum {
  20         IPSEC_DIR_ANY           = 0,
  21         IPSEC_DIR_INBOUND       = 1,
  22         IPSEC_DIR_OUTBOUND      = 2,
  23         IPSEC_DIR_FWD           = 3,    /* It is our own */
  24         IPSEC_DIR_MAX           = 4,
  25         IPSEC_DIR_INVALID       = 5
  26 };
  27
  28 enum {
  29         IPSEC_POLICY_DISCARD    = 0,
  30         IPSEC_POLICY_NONE       = 1,
  31         IPSEC_POLICY_IPSEC      = 2,
  32         IPSEC_POLICY_ENTRUST    = 3,
  33         IPSEC_POLICY_BYPASS     = 4
  34 };
  35
  36 enum {
  37         IPSEC_LEVEL_DEFAULT     = 0,
  38         IPSEC_LEVEL_USE         = 1,
  39         IPSEC_LEVEL_REQUIRE     = 2,
  40         IPSEC_LEVEL_UNIQUE      = 3
  41 };
  42
  43 #define IPSEC_MANUAL_REQID_MAX  0x3fff
  44
  45 #define IPSEC_REPLAYWSIZE  32
  46
  47 #endif  /* _LINUX_IPSEC_H */