sbin/ipsecctl/ike.c

51 #define	SET	"C set "
67 		fprintf(fd, SET "[General]:Check-interval=%d force\n",
69 		fprintf(fd, SET "[General]:DPD-check-interval=%d force\n",
78 		fprintf(fd, SET "[Phase 1]:%s=%s force\n", r->peer->name,
81 		fprintf(fd, SET "[Phase 1]:Default=%s force\n", r->p1name);
82 	fprintf(fd, SET "[%s]:Phase=1 force\n", r->p1name);
84 		fprintf(fd, SET "[%s]:Address=%s force\n", r->p1name,
87 		fprintf(fd, SET "[%s]:Local-address=%s force\n", r->p1name,
90 		fprintf(fd, SET "[%s]:Authentication=%s force\n", r->p1name,
110 		fprintf(fd, SET "[%s]:ID=id-%s force\n", r->p1name,
112 		fprintf(fd, SET "[id-%s]:ID-type=%s force\n", r->auth->srcid,
116 			fprintf(fd, SET "[id-%s]:Address=%s force\n",
119 			fprintf(fd, SET "[id-%s]:Name=%s force\n",
123 		fprintf(fd, SET "[%s]:Remote-ID=id-%s force\n", r->p1name,
125 		fprintf(fd, SET "[id-%s]:ID-type=%s force\n", r->auth->dstid,
129 			fprintf(fd, SET "[id-%s]:Address=%s force\n",
132 			fprintf(fd, SET "[id-%s]:Name=%s force\n",
140 	fprintf(fd, SET "[%s]:Phase=2 force\n", r->p2name);
141 	fprintf(fd, SET "[%s]:ISAKMP-peer=%s force\n", r->p2name, r->p1name);
142 	fprintf(fd, SET "[%s]:Configuration=phase2-%s force\n", r->p2name,
144 	fprintf(fd, SET "[%s]:Local-ID=%s force\n", r->p2name, r->p2lid);
146 		fprintf(fd, SET "[%s]:NAT-ID=%s force\n", r->p2name, r->p2nid);
147 	fprintf(fd, SET "[%s]:Remote-ID=%s force\n", r->p2name, r->p2rid);
150 		fprintf(fd, SET "[%s]:PF-Tag=%s force\n", r->p2name, r->tag);
152 		fprintf(fd, SET "[%s]:Interface=%u force\n", r->p2name,
174 	fprintf(fd, SET "[phase2-%s]:EXCHANGE_TYPE=%s force\n", r->p2name,
176 	fprintf(fd, SET "[phase2-%s]:Suites=phase2-suite-%s force\n", r->p2name,
179 	fprintf(fd, SET "[phase2-suite-%s]:Protocols=phase2-protocol-%s "
182 	fprintf(fd, SET "[phase2-protocol-%s]:PROTOCOL_ID=", r->p2name);
411 	fprintf(fd, SET "[phase2-protocol-%s]:Transforms=%s force\n",
414 	fprintf(fd, SET "[%s]:TRANSFORM_ID=%s force\n", transform,
417 		fprintf(fd, SET "[%s]:KEY_LENGTH=%s force\n", transform,
419 	fprintf(fd, SET "[%s]:ENCAPSULATION_MODE=%s force\n", transform, encap);
421 		fprintf(fd, SET "[%s]:AUTHENTICATION_ALGORITHM=HMAC_%s force\n",
424 		fprintf(fd, SET "[%s]:GROUP_DESCRIPTION=%s force\n", transform,
428 		fprintf(fd, SET "[%s]:Life=%s-life force\n",
430 		fprintf(fd, SET "[%s-life]:LIFE_TYPE=SECONDS force\n",
432 		fprintf(fd, SET "[%s-life]:LIFE_DURATION=%d force\n",
435 		fprintf(fd, SET "[%s]:Life=LIFE_QUICK_MODE force\n",
461 	fprintf(fd, SET "[%s]:Configuration=phase1-%s force\n", r->p1name,
463 	fprintf(fd, SET "[phase1-%s]:EXCHANGE_TYPE=%s force\n", r->p1name,
612 	fprintf(fd, SET "[%s]:AUTHENTICATION_METHOD=%s force\n", transform,
614 	fprintf(fd, SET "[%s]:HASH_ALGORITHM=%s force\n", transform, auth_alg);
615 	fprintf(fd, SET "[%s]:ENCRYPTION_ALGORITHM=%s_CBC force\n", transform,
618 		fprintf(fd, SET "[%s]:KEY_LENGTH=%s force\n", transform,
620 	fprintf(fd, SET "[%s]:GROUP_DESCRIPTION=%s force\n", transform,
624 		fprintf(fd, SET "[%s]:Life=%s-life force\n",
626 		fprintf(fd, SET "[%s-life]:LIFE_TYPE=SECONDS force\n",
628 		fprintf(fd, SET "[%s-life]:LIFE_DURATION=%d force\n",
631 		fprintf(fd, SET "[%s]:Life=LIFE_MAIN_MODE force\n", transform);
671 	fprintf(fd, SET "[%s]:ID-type=IPV%d_ADDR_SUBNET force\n",
673 	fprintf(fd, SET "[%s]:Network=%s force\n", p2xid, network);
674 	fprintf(fd, SET "[%s]:Netmask=%s force\n", p2xid, mask);
690 		fprintf(fd, SET "[%s]:ID-type=IPV%d_ADDR force\n",
694 		fprintf(fd, SET "[%s]:Address=%s force\n", r->p2lid,
702 		fprintf(fd, SET "[%s]:ID-type=IPV%d_ADDR force\n",
706 		fprintf(fd, SET "[%s]:Address=%s force\n", r->p2nid,
714 		fprintf(fd, SET "[%s]:ID-type=IPV%d_ADDR force\n",
718 		fprintf(fd, SET "[%s]:Address=%s force\n", r->p2rid,
722 		fprintf(fd, SET "[%s]:Protocol=%d force\n",
724 		fprintf(fd, SET "[%s]:Protocol=%d force\n",
728 		fprintf(fd, SET "[%s]:Port=%d force\n", r->p2lid,
731 		fprintf(fd, SET "[%s]:Port=%d force\n", r->p2rid,