Merge commit 'remotes/tip/x86/paravirt' into x86/untangle2
[linux-2.6] / include / linux / ipsec.h
1 #ifndef _LINUX_IPSEC_H
2 #define _LINUX_IPSEC_H
3
4 /* The definitions, required to talk to KAME racoon IKE. */
5
6 #include <linux/pfkeyv2.h>
7
8 #define IPSEC_PORT_ANY          0
9 #define IPSEC_ULPROTO_ANY       255
10 #define IPSEC_PROTO_ANY         255
11
12 enum {
13         IPSEC_MODE_ANY          = 0,    /* We do not support this for SA */
14         IPSEC_MODE_TRANSPORT    = 1,
15         IPSEC_MODE_TUNNEL       = 2,
16         IPSEC_MODE_BEET         = 3
17 };
18
19 enum {
20         IPSEC_DIR_ANY           = 0,
21         IPSEC_DIR_INBOUND       = 1,
22         IPSEC_DIR_OUTBOUND      = 2,
23         IPSEC_DIR_FWD           = 3,    /* It is our own */
24         IPSEC_DIR_MAX           = 4,
25         IPSEC_DIR_INVALID       = 5
26 };
27
28 enum {
29         IPSEC_POLICY_DISCARD    = 0,
30         IPSEC_POLICY_NONE       = 1,
31         IPSEC_POLICY_IPSEC      = 2,
32         IPSEC_POLICY_ENTRUST    = 3,
33         IPSEC_POLICY_BYPASS     = 4
34 };
35
36 enum {
37         IPSEC_LEVEL_DEFAULT     = 0,
38         IPSEC_LEVEL_USE         = 1,
39         IPSEC_LEVEL_REQUIRE     = 2,
40         IPSEC_LEVEL_UNIQUE      = 3
41 };
42
43 #define IPSEC_MANUAL_REQID_MAX  0x3fff
44
45 #define IPSEC_REPLAYWSIZE  32
46
47 #endif  /* _LINUX_IPSEC_H */