testing: use a decent PSK
[strongswan.git] / src / include / linux / ipsec.h
1 #ifndef _LINUX_IPSEC_H
2 #define _LINUX_IPSEC_H
3
4 /* The definitions, required to talk to KAME racoon IKE. */
5
6 #include <linux/pfkeyv2.h>
7
8 #define IPSEC_PORT_ANY 0
9 #define IPSEC_ULPROTO_ANY 255
10 #define IPSEC_PROTO_ANY 255
11
12 enum {
13 IPSEC_MODE_ANY = 0, /* We do not support this for SA */
14 IPSEC_MODE_TRANSPORT = 1,
15 IPSEC_MODE_TUNNEL = 2,
16 IPSEC_MODE_BEET = 3
17 };
18
19 enum {
20 IPSEC_DIR_ANY = 0,
21 IPSEC_DIR_INBOUND = 1,
22 IPSEC_DIR_OUTBOUND = 2,
23 IPSEC_DIR_FWD = 3, /* It is our own */
24 IPSEC_DIR_MAX = 4,
25 IPSEC_DIR_INVALID = 5
26 };
27
28 enum {
29 IPSEC_POLICY_DISCARD = 0,
30 IPSEC_POLICY_NONE = 1,
31 IPSEC_POLICY_IPSEC = 2,
32 IPSEC_POLICY_ENTRUST = 3,
33 IPSEC_POLICY_BYPASS = 4
34 };
35
36 enum {
37 IPSEC_LEVEL_DEFAULT = 0,
38 IPSEC_LEVEL_USE = 1,
39 IPSEC_LEVEL_REQUIRE = 2,
40 IPSEC_LEVEL_UNIQUE = 3
41 };
42
43 #define IPSEC_MANUAL_REQID_MAX 0x3fff
44
45 #define IPSEC_REPLAYWSIZE 32
46
47 #endif /* _LINUX_IPSEC_H */