xref: /linux/include/uapi/linux/ipsec.h (revision 498495dba268b20e8eadd7fe93c140c68b6cc9d2)
1*6f52b16cSGreg Kroah-Hartman /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2607ca46eSDavid Howells #ifndef _LINUX_IPSEC_H
3607ca46eSDavid Howells #define _LINUX_IPSEC_H
4607ca46eSDavid Howells 
5607ca46eSDavid Howells /* The definitions, required to talk to KAME racoon IKE. */
6607ca46eSDavid Howells 
7607ca46eSDavid Howells #include <linux/pfkeyv2.h>
8607ca46eSDavid Howells 
9607ca46eSDavid Howells #define IPSEC_PORT_ANY		0
10607ca46eSDavid Howells #define IPSEC_ULPROTO_ANY	255
11607ca46eSDavid Howells #define IPSEC_PROTO_ANY		255
12607ca46eSDavid Howells 
13607ca46eSDavid Howells enum {
14607ca46eSDavid Howells 	IPSEC_MODE_ANY		= 0,	/* We do not support this for SA */
15607ca46eSDavid Howells 	IPSEC_MODE_TRANSPORT	= 1,
16607ca46eSDavid Howells 	IPSEC_MODE_TUNNEL	= 2,
17607ca46eSDavid Howells 	IPSEC_MODE_BEET         = 3
18607ca46eSDavid Howells };
19607ca46eSDavid Howells 
20607ca46eSDavid Howells enum {
21607ca46eSDavid Howells 	IPSEC_DIR_ANY		= 0,
22607ca46eSDavid Howells 	IPSEC_DIR_INBOUND	= 1,
23607ca46eSDavid Howells 	IPSEC_DIR_OUTBOUND	= 2,
24607ca46eSDavid Howells 	IPSEC_DIR_FWD		= 3,	/* It is our own */
25607ca46eSDavid Howells 	IPSEC_DIR_MAX		= 4,
26607ca46eSDavid Howells 	IPSEC_DIR_INVALID	= 5
27607ca46eSDavid Howells };
28607ca46eSDavid Howells 
29607ca46eSDavid Howells enum {
30607ca46eSDavid Howells 	IPSEC_POLICY_DISCARD	= 0,
31607ca46eSDavid Howells 	IPSEC_POLICY_NONE	= 1,
32607ca46eSDavid Howells 	IPSEC_POLICY_IPSEC	= 2,
33607ca46eSDavid Howells 	IPSEC_POLICY_ENTRUST	= 3,
34607ca46eSDavid Howells 	IPSEC_POLICY_BYPASS	= 4
35607ca46eSDavid Howells };
36607ca46eSDavid Howells 
37607ca46eSDavid Howells enum {
38607ca46eSDavid Howells 	IPSEC_LEVEL_DEFAULT	= 0,
39607ca46eSDavid Howells 	IPSEC_LEVEL_USE		= 1,
40607ca46eSDavid Howells 	IPSEC_LEVEL_REQUIRE	= 2,
41607ca46eSDavid Howells 	IPSEC_LEVEL_UNIQUE	= 3
42607ca46eSDavid Howells };
43607ca46eSDavid Howells 
44607ca46eSDavid Howells #define IPSEC_MANUAL_REQID_MAX	0x3fff
45607ca46eSDavid Howells 
46607ca46eSDavid Howells #define IPSEC_REPLAYWSIZE  32
47607ca46eSDavid Howells 
48607ca46eSDavid Howells #endif	/* _LINUX_IPSEC_H */
49