76 lines
1.9 KiB
C
76 lines
1.9 KiB
C
#ifndef _IPSEC_API_H
|
||
#define _IPSEC_API_H
|
||
|
||
#include "common_types.h"
|
||
|
||
#define MAX_TUN_NAME_LEN 31
|
||
#define MAX_IP_STR_LEN 63
|
||
#define MAX_SUBNET_STR_LEN 67
|
||
#define MAX_AUTH_ID_LEN 63
|
||
#define MAX_PSK_LEN 31
|
||
#define MAX_IKE_PROP_LEN 127
|
||
#define MAX_IPSEC_PROP_LEN 127
|
||
|
||
typedef struct _ikev1_config_ph1 {
|
||
char ph1_name[MAX_TUN_NAME_LEN+1]; /* key值，要求不能重复 */
|
||
|
||
/* 隧道源地址与目的地址 */
|
||
char local_ip_str[MAX_IP_STR_LEN+1];
|
||
char remote_ip_str[MAX_IP_STR_LEN+1]; /* 要求不能重复 */
|
||
|
||
/* 认证方式 */
|
||
u32 auth_method;
|
||
|
||
/* PSK */
|
||
char psk[MAX_PSK_LEN+1];
|
||
|
||
/* 一阶段加密算法、认证算法、DH组 */
|
||
char ike_proposal_str[MAX_IKE_PROP_LEN+1];
|
||
|
||
/* 一阶段模式: 隧道模式、传输模式 */
|
||
u32 mode;
|
||
|
||
u32 sa_ike_life_seconds;
|
||
int dpd_delay;
|
||
int dpd_timeout;
|
||
bool nat_keepalive;
|
||
} ikev1_config_ph1_t;
|
||
|
||
|
||
typedef struct _ikev1_config_ph2 {
|
||
char ph2_name[MAX_TUN_NAME_LEN+1]; /* key值，要求不能重复 */
|
||
char refph1_name[MAX_TUN_NAME_LEN+1]; /* 引用的第一阶段隧道名 */
|
||
|
||
/* 流量选择符信息: 源保护子网、目的保护子网、上层保护协议、源端口与目的端口（上层保护协议为UDP或TCP时有效） */
|
||
char local_net_str[MAX_SUBNET_STR_LEN+1];
|
||
char remote_net_str[MAX_SUBNET_STR_LEN+1];
|
||
u16 ul_protocol;
|
||
u8 ul_port_ln;
|
||
u8 ul_port_rn;
|
||
|
||
/* 二阶段加密算法、认证算法、PFS */
|
||
char ipsec_proposal_str[MAX_IPSEC_PROP_LEN+1];
|
||
|
||
u32 sa_ipsec_life_seconds;
|
||
u32 sa_ipsec_life_kilobytes;
|
||
int encapsulation;
|
||
} ikev1_config_ph2_t;
|
||
|
||
|
||
typedef struct _ikev2_config {
|
||
/* 待填充 */
|
||
;
|
||
} ikev2_config_t;
|
||
|
||
|
||
typedef union _ike_config {
|
||
struct {
|
||
ikev1_config_ph1_t ph1;
|
||
ikev1_config_ph2_t ph2;
|
||
}v1;
|
||
ikev2_config_t v2;
|
||
}ike_config_t;
|
||
|
||
#endif
|
||
|