1/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2#ifndef _LINUX_IPSEC_H
3#define _LINUX_IPSEC_H
4
5/* The definitions, required to talk to KAME racoon IKE. */
6
7#include <linux/pfkeyv2.h>
8
9#define IPSEC_PORT_ANY		0
10#define IPSEC_ULPROTO_ANY	255
11#define IPSEC_PROTO_ANY		255
12
13enum {
14	IPSEC_MODE_ANY		= 0,	/* We do not support this for SA */
15	IPSEC_MODE_TRANSPORT	= 1,
16	IPSEC_MODE_TUNNEL	= 2,
17	IPSEC_MODE_BEET         = 3
18};
19
20enum {
21	IPSEC_DIR_ANY		= 0,
22	IPSEC_DIR_INBOUND	= 1,
23	IPSEC_DIR_OUTBOUND	= 2,
24	IPSEC_DIR_FWD		= 3,	/* It is our own */
25	IPSEC_DIR_MAX		= 4,
26	IPSEC_DIR_INVALID	= 5
27};
28
29enum {
30	IPSEC_POLICY_DISCARD	= 0,
31	IPSEC_POLICY_NONE	= 1,
32	IPSEC_POLICY_IPSEC	= 2,
33	IPSEC_POLICY_ENTRUST	= 3,
34	IPSEC_POLICY_BYPASS	= 4
35};
36
37enum {
38	IPSEC_LEVEL_DEFAULT	= 0,
39	IPSEC_LEVEL_USE		= 1,
40	IPSEC_LEVEL_REQUIRE	= 2,
41	IPSEC_LEVEL_UNIQUE	= 3
42};
43
44#define IPSEC_MANUAL_REQID_MAX	0x3fff
45
46#define IPSEC_REPLAYWSIZE  32
47
48#endif	/* _LINUX_IPSEC_H */
49