parent
f8e9e36bf7
commit
dbeae9e4c1
|
@ -0,0 +1,75 @@
|
|||
#ifndef _IPSEC_API_H
|
||||
#define _IPSEC_API_H
|
||||
|
||||
#include "common_types.h"
|
||||
|
||||
#define MAX_TUN_NAME_LEN 31
|
||||
#define MAX_IP_STR_LEN 63
|
||||
#define MAX_SUBNET_STR_LEN 67
|
||||
#define MAX_AUTH_ID_LEN 63
|
||||
#define MAX_PSK_LEN 31
|
||||
#define MAX_IKE_PROP_LEN 127
|
||||
#define MAX_IPSEC_PROP_LEN 127
|
||||
|
||||
typedef struct _ikev1_config_ph1 {
|
||||
char ph1_name[MAX_TUN_NAME_LEN+1]; /* key值,要求不能重复 */
|
||||
|
||||
/* 隧道源地址与目的地址 */
|
||||
char local_ip_str[MAX_IP_STR_LEN+1];
|
||||
char remote_ip_str[MAX_IP_STR_LEN+1]; /* 要求不能重复 */
|
||||
|
||||
/* 认证方式 */
|
||||
u32 auth_method;
|
||||
|
||||
/* PSK */
|
||||
char psk[MAX_PSK_LEN+1];
|
||||
|
||||
/* 一阶段加密算法、认证算法、DH组 */
|
||||
char ike_proposal_str[MAX_IKE_PROP_LEN+1];
|
||||
|
||||
/* 一阶段模式: 隧道模式、传输模式 */
|
||||
u32 mode;
|
||||
|
||||
u32 sa_ike_life_seconds;
|
||||
int dpd_delay;
|
||||
int dpd_timeout;
|
||||
bool nat_keepalive;
|
||||
} ikev1_config_ph1_t;
|
||||
|
||||
|
||||
typedef struct _ikev1_config_ph2 {
|
||||
char ph2_name[MAX_TUN_NAME_LEN+1]; /* key值,要求不能重复 */
|
||||
char refph1_name[MAX_TUN_NAME_LEN+1]; /* 引用的第一阶段隧道名 */
|
||||
|
||||
/* 流量选择符信息: 源保护子网、目的保护子网、上层保护协议、源端口与目的端口(上层保护协议为UDP或TCP时有效) */
|
||||
char local_net_str[MAX_SUBNET_STR_LEN+1];
|
||||
char remote_net_str[MAX_SUBNET_STR_LEN+1];
|
||||
u16 ul_protocol;
|
||||
u8 ul_port_ln;
|
||||
u8 ul_port_rn;
|
||||
|
||||
/* 二阶段加密算法、认证算法、PFS */
|
||||
char ipsec_proposal_str[MAX_IPSEC_PROP_LEN+1];
|
||||
|
||||
u32 sa_ipsec_life_seconds;
|
||||
u32 sa_ipsec_life_kilobytes;
|
||||
int encapsulation;
|
||||
} ikev1_config_ph2_t;
|
||||
|
||||
|
||||
typedef struct _ikev2_config {
|
||||
/* 待填充 */
|
||||
;
|
||||
} ikev2_config_t;
|
||||
|
||||
|
||||
typedef union _ike_config {
|
||||
struct {
|
||||
ikev1_config_ph1_t ph1;
|
||||
ikev1_config_ph2_t ph2;
|
||||
}v1;
|
||||
ikev2_config_t v2;
|
||||
}ike_config_t;
|
||||
|
||||
#endif
|
||||
|
|
@ -1,81 +1,11 @@
|
|||
#ifndef _IKE_CONFIG_H
|
||||
#define _IKE_CONFIG_H
|
||||
|
||||
#include <stdio.h>
|
||||
#include <stdio.h>
|
||||
|
||||
#include "rpc_types.h"
|
||||
#include "rpc_common.h"
|
||||
|
||||
|
||||
#define MAX_TUN_NAME_LEN 31
|
||||
#define MAX_IP_STR_LEN 63
|
||||
#define MAX_SUBNET_STR_LEN 67
|
||||
#define MAX_AUTH_ID_LEN 63
|
||||
#define MAX_PSK_LEN 31
|
||||
#define MAX_IKE_PROP_LEN 127
|
||||
#define MAX_IPSEC_PROP_LEN 127
|
||||
|
||||
|
||||
typedef struct _ikev1_config_ph1 {
|
||||
char ph1_name[MAX_TUN_NAME_LEN+1]; /* key值,要求不能重复 */
|
||||
|
||||
/* 隧道源地址与目的地址 */
|
||||
char local_ip_str[MAX_IP_STR_LEN+1];
|
||||
char remote_ip_str[MAX_IP_STR_LEN+1]; /* 要求不能重复 */
|
||||
|
||||
/* 认证方式 */
|
||||
u32 auth_method;
|
||||
|
||||
/* PSK */
|
||||
char psk[MAX_PSK_LEN+1];
|
||||
|
||||
/* 一阶段加密算法、认证算法、DH组 */
|
||||
char ike_proposal_str[MAX_IKE_PROP_LEN+1];
|
||||
|
||||
/* 一阶段模式: 隧道模式、传输模式 */
|
||||
u32 mode;
|
||||
|
||||
u32 sa_ike_life_seconds;
|
||||
int dpd_delay;
|
||||
int dpd_timeout;
|
||||
bool nat_keepalive;
|
||||
} ikev1_config_ph1;
|
||||
|
||||
|
||||
typedef struct _ikev1_config_ph2 {
|
||||
char ph2_name[MAX_TUN_NAME_LEN+1]; /* key值,要求不能重复 */
|
||||
char refph1_name[MAX_TUN_NAME_LEN+1]; /* 引用的第一阶段隧道名 */
|
||||
|
||||
/* 流量选择符信息: 源保护子网、目的保护子网、上层保护协议、源端口与目的端口(上层保护协议为UDP或TCP时有效) */
|
||||
char local_net_str[MAX_SUBNET_STR_LEN+1];
|
||||
char remote_net_str[MAX_SUBNET_STR_LEN+1];
|
||||
u16 ul_protocol;
|
||||
u8 ul_port_ln;
|
||||
u8 ul_port_rn;
|
||||
|
||||
/* 二阶段加密算法、认证算法、PFS */
|
||||
char ipsec_proposal_str[MAX_IPSEC_PROP_LEN+1];
|
||||
|
||||
u32 sa_ipsec_life_seconds;
|
||||
u32 sa_ipsec_life_kilobytes;
|
||||
int encapsulation;
|
||||
} ikev1_config_ph2;
|
||||
|
||||
|
||||
typedef struct _ikev2_config {
|
||||
/* 待填充 */
|
||||
;
|
||||
} ikev2_config;
|
||||
|
||||
|
||||
typedef union _ike_config {
|
||||
struct {
|
||||
ikev1_config_ph1 ph1;
|
||||
ikev1_config_ph2 ph2;
|
||||
}v1;
|
||||
ikev2_config v2;
|
||||
}ike_config;
|
||||
|
||||
ret_code ike_config_chk(uint source, uint *config_type,
|
||||
pointer input, int *input_len,
|
||||
pointer output, int *output_len);
|
||||
|
|
Loading…
Reference in New Issue