xref: /linux/include/uapi/linux/ipsec.h (revision 498495dba268b20e8eadd7fe93c140c68b6cc9d2)
1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 #ifndef _LINUX_IPSEC_H
3 #define _LINUX_IPSEC_H
4 
5 /* The definitions, required to talk to KAME racoon IKE. */
6 
7 #include <linux/pfkeyv2.h>
8 
9 #define IPSEC_PORT_ANY		0
10 #define IPSEC_ULPROTO_ANY	255
11 #define IPSEC_PROTO_ANY		255
12 
13 enum {
14 	IPSEC_MODE_ANY		= 0,	/* We do not support this for SA */
15 	IPSEC_MODE_TRANSPORT	= 1,
16 	IPSEC_MODE_TUNNEL	= 2,
17 	IPSEC_MODE_BEET         = 3
18 };
19 
20 enum {
21 	IPSEC_DIR_ANY		= 0,
22 	IPSEC_DIR_INBOUND	= 1,
23 	IPSEC_DIR_OUTBOUND	= 2,
24 	IPSEC_DIR_FWD		= 3,	/* It is our own */
25 	IPSEC_DIR_MAX		= 4,
26 	IPSEC_DIR_INVALID	= 5
27 };
28 
29 enum {
30 	IPSEC_POLICY_DISCARD	= 0,
31 	IPSEC_POLICY_NONE	= 1,
32 	IPSEC_POLICY_IPSEC	= 2,
33 	IPSEC_POLICY_ENTRUST	= 3,
34 	IPSEC_POLICY_BYPASS	= 4
35 };
36 
37 enum {
38 	IPSEC_LEVEL_DEFAULT	= 0,
39 	IPSEC_LEVEL_USE		= 1,
40 	IPSEC_LEVEL_REQUIRE	= 2,
41 	IPSEC_LEVEL_UNIQUE	= 3
42 };
43 
44 #define IPSEC_MANUAL_REQID_MAX	0x3fff
45 
46 #define IPSEC_REPLAYWSIZE  32
47 
48 #endif	/* _LINUX_IPSEC_H */
49