1/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
 2#ifndef _LINUX_IPSEC_H
 3#define _LINUX_IPSEC_H
 4
 5/* The definitions, required to talk to KAME racoon IKE. */
 6
 7#include <linux/pfkeyv2.h>
 8
 9#define IPSEC_PORT_ANY		0
10#define IPSEC_ULPROTO_ANY	255
11#define IPSEC_PROTO_ANY		255
12
13enum {
14	IPSEC_MODE_ANY		= 0,	/* We do not support this for SA */
15	IPSEC_MODE_TRANSPORT	= 1,
16	IPSEC_MODE_TUNNEL	= 2,
17	IPSEC_MODE_BEET         = 3,
18	IPSEC_MODE_IPTFS        = 4
19};
20
21enum {
22	IPSEC_DIR_ANY		= 0,
23	IPSEC_DIR_INBOUND	= 1,
24	IPSEC_DIR_OUTBOUND	= 2,
25	IPSEC_DIR_FWD		= 3,	/* It is our own */
26	IPSEC_DIR_MAX		= 4,
27	IPSEC_DIR_INVALID	= 5
28};
29
30enum {
31	IPSEC_POLICY_DISCARD	= 0,
32	IPSEC_POLICY_NONE	= 1,
33	IPSEC_POLICY_IPSEC	= 2,
34	IPSEC_POLICY_ENTRUST	= 3,
35	IPSEC_POLICY_BYPASS	= 4
36};
37
38enum {
39	IPSEC_LEVEL_DEFAULT	= 0,
40	IPSEC_LEVEL_USE		= 1,
41	IPSEC_LEVEL_REQUIRE	= 2,
42	IPSEC_LEVEL_UNIQUE	= 3
43};
44
45#define IPSEC_MANUAL_REQID_MAX	0x3fff
46
47#define IPSEC_REPLAYWSIZE  32
48
49#endif	/* _LINUX_IPSEC_H */