1*4882a593Smuzhiyun /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ 2*4882a593Smuzhiyun #ifndef _LINUX_IPSEC_H 3*4882a593Smuzhiyun #define _LINUX_IPSEC_H 4*4882a593Smuzhiyun 5*4882a593Smuzhiyun /* The definitions, required to talk to KAME racoon IKE. */ 6*4882a593Smuzhiyun 7*4882a593Smuzhiyun #include <linux/pfkeyv2.h> 8*4882a593Smuzhiyun 9*4882a593Smuzhiyun #define IPSEC_PORT_ANY 0 10*4882a593Smuzhiyun #define IPSEC_ULPROTO_ANY 255 11*4882a593Smuzhiyun #define IPSEC_PROTO_ANY 255 12*4882a593Smuzhiyun 13*4882a593Smuzhiyun enum { 14*4882a593Smuzhiyun IPSEC_MODE_ANY = 0, /* We do not support this for SA */ 15*4882a593Smuzhiyun IPSEC_MODE_TRANSPORT = 1, 16*4882a593Smuzhiyun IPSEC_MODE_TUNNEL = 2, 17*4882a593Smuzhiyun IPSEC_MODE_BEET = 3 18*4882a593Smuzhiyun }; 19*4882a593Smuzhiyun 20*4882a593Smuzhiyun enum { 21*4882a593Smuzhiyun IPSEC_DIR_ANY = 0, 22*4882a593Smuzhiyun IPSEC_DIR_INBOUND = 1, 23*4882a593Smuzhiyun IPSEC_DIR_OUTBOUND = 2, 24*4882a593Smuzhiyun IPSEC_DIR_FWD = 3, /* It is our own */ 25*4882a593Smuzhiyun IPSEC_DIR_MAX = 4, 26*4882a593Smuzhiyun IPSEC_DIR_INVALID = 5 27*4882a593Smuzhiyun }; 28*4882a593Smuzhiyun 29*4882a593Smuzhiyun enum { 30*4882a593Smuzhiyun IPSEC_POLICY_DISCARD = 0, 31*4882a593Smuzhiyun IPSEC_POLICY_NONE = 1, 32*4882a593Smuzhiyun IPSEC_POLICY_IPSEC = 2, 33*4882a593Smuzhiyun IPSEC_POLICY_ENTRUST = 3, 34*4882a593Smuzhiyun IPSEC_POLICY_BYPASS = 4 35*4882a593Smuzhiyun }; 36*4882a593Smuzhiyun 37*4882a593Smuzhiyun enum { 38*4882a593Smuzhiyun IPSEC_LEVEL_DEFAULT = 0, 39*4882a593Smuzhiyun IPSEC_LEVEL_USE = 1, 40*4882a593Smuzhiyun IPSEC_LEVEL_REQUIRE = 2, 41*4882a593Smuzhiyun IPSEC_LEVEL_UNIQUE = 3 42*4882a593Smuzhiyun }; 43*4882a593Smuzhiyun 44*4882a593Smuzhiyun #define IPSEC_MANUAL_REQID_MAX 0x3fff 45*4882a593Smuzhiyun 46*4882a593Smuzhiyun #define IPSEC_REPLAYWSIZE 32 47*4882a593Smuzhiyun 48*4882a593Smuzhiyun #endif /* _LINUX_IPSEC_H */ 49