1/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2#ifndef _LINUX_IPSEC_H
3#define _LINUX_IPSEC_H
4
5/* The definitions, required to talk to KAME racoon IKE. */
6
7#include <linux/pfkeyv2.h>
8
9#define IPSEC_PORT_ANY 0
10#define IPSEC_ULPROTO_ANY 255
11#define IPSEC_PROTO_ANY 255
12
13enum {
14 IPSEC_MODE_ANY = 0, /* We do not support this for SA */
15 IPSEC_MODE_TRANSPORT = 1,
16 IPSEC_MODE_TUNNEL = 2,
17 IPSEC_MODE_BEET = 3,
18 IPSEC_MODE_IPTFS = 4
19};
20
21enum {
22 IPSEC_DIR_ANY = 0,
23 IPSEC_DIR_INBOUND = 1,
24 IPSEC_DIR_OUTBOUND = 2,
25 IPSEC_DIR_FWD = 3, /* It is our own */
26 IPSEC_DIR_MAX = 4,
27 IPSEC_DIR_INVALID = 5
28};
29
30enum {
31 IPSEC_POLICY_DISCARD = 0,
32 IPSEC_POLICY_NONE = 1,
33 IPSEC_POLICY_IPSEC = 2,
34 IPSEC_POLICY_ENTRUST = 3,
35 IPSEC_POLICY_BYPASS = 4
36};
37
38enum {
39 IPSEC_LEVEL_DEFAULT = 0,
40 IPSEC_LEVEL_USE = 1,
41 IPSEC_LEVEL_REQUIRE = 2,
42 IPSEC_LEVEL_UNIQUE = 3
43};
44
45#define IPSEC_MANUAL_REQID_MAX 0x3fff
46
47#define IPSEC_REPLAYWSIZE 32
48
49#endif /* _LINUX_IPSEC_H */