diff options
author | Markus Friedl <markus@cvs.openbsd.org> | 2003-12-02 23:16:30 +0000 |
---|---|---|
committer | Markus Friedl <markus@cvs.openbsd.org> | 2003-12-02 23:16:30 +0000 |
commit | 7827007d3935fef762fc37ed47e44956982e543a (patch) | |
tree | 32503217eaf3f477211d64e2f795e83f59c1a618 /sys/netinet/ip_esp.h | |
parent | efce987ff534832e2def76f49222eb98d59aefaa (diff) |
UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt)
ok deraadt@
Diffstat (limited to 'sys/netinet/ip_esp.h')
-rw-r--r-- | sys/netinet/ip_esp.h | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/sys/netinet/ip_esp.h b/sys/netinet/ip_esp.h index 6be3aafcf23..ba1098adaf7 100644 --- a/sys/netinet/ip_esp.h +++ b/sys/netinet/ip_esp.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ip_esp.h,v 1.38 2003/02/12 14:41:07 jason Exp $ */ +/* $OpenBSD: ip_esp.h,v 1.39 2003/12/02 23:16:28 markus Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -61,21 +61,30 @@ struct espstat u_int32_t esps_toobig; /* Packet got larger than IP_MAXPACKET */ u_int32_t esps_pdrops; /* Packet blocked due to policy */ u_int32_t esps_crypto; /* Crypto processing failure */ + u_int32_t esps_udpencin; /* Input ESP-in-UDP packets */ + u_int32_t esps_udpencout; /* Output ESP-in-UDP packets */ + u_int32_t esps_udpinval; /* Invalid input ESP-in-UDP packets */ }; /* * Names for ESP sysctl objects */ -#define ESPCTL_ENABLE 1 /* Enable ESP processing */ -#define ESPCTL_MAXID 2 +#define ESPCTL_ENABLE 1 /* Enable ESP processing */ +#define ESPCTL_UDPENCAP_ENABLE 2 /* Enable ESP over UDP */ +#define ESPCTL_UDPENCAP_PORT 3 /* UDP port for encapsulation */ +#define ESPCTL_MAXID 4 #define ESPCTL_NAMES { \ { 0, 0 }, \ { "enable", CTLTYPE_INT }, \ + { "udpencap", CTLTYPE_INT }, \ + { "udpencap_port", CTLTYPE_INT }, \ } #ifdef _KERNEL extern int esp_enable; +extern int udpencap_enable; +extern int udpencap_port; extern struct espstat espstat; #endif /* _KERNEL */ #endif /* _NETINET_IP_ESP_H_ */ |