Struct:ttIpsecPolicyPair
#include trsecapi.h typedef struct tsIpsecPolicyPair { #ifdef TM_USE_PRIORITIES ttUser16Bit ippPriority; #endif /* TM_USE_PRIORITIES */ #ifdef TM_USE_IKE_POLICIES ttUser16Bit ippIkePolicy; #endif /* TM_USE_IKE_POLICIES */ ttUser16Bit ippSelectorIndex; ttUser8Bit ippPlcycontentIndex; ttUser8Bit ippDirection; #ifdef TM_USE_MULTIPLE_PROPOSALS ttUser8Bit ippProposalNumber; ttUser8Bit ippTransformNumber; /* when non-zero, designates a manual-only policy (won't key w/IKE) */ ttUser8Bit ippManual; #endif /* TM_USE_MULTIPLE_PROPOSALS */ } ttIpsecPolicyPair; typedef struct tsIpsecPolicyPair TM_FAR * ttIpsecPolicyPairPtr;
Structure Description
ttIpsecPolicyPair will be used when the user calls tfPolicyRestore(). ttIpsecPolicyPair specifies which rules are applied to received packets (TM_IPSEC_INBOUND), sent packets (TM_IPSEC_OUTBOUND), and in what order. Packets matching the direction and the selector[selectorIndex] will be protected by policy_content[plcycontentIndex].
Members
- ippPriority
- The priority of this policy entry.
- ippIkePolicy
- The IKE policy to use with this IPsec policy specified by its unique priority.
- selectorIndex
- The index of the selector lists for this policy. The selector list is initialized as ttIpsecSelectorInString type.
- plcyContentIndex
- The index of the policy content lists for this policy. The content list is initialized as ttPolicyContentInString type.
- direction
- The direction of traffic that this policy applies to. This could be TM_IPSEC_INBOUND for inbound packet (receive path), or TM_IPSEC_OUTBOUND for outbound packet(send path), or TM_IPSEC_BOTH_DIRECTION for both receive path and send path.
- ippProposalNumber
- The order in which to include this proposal in the offer. This order indicates priority.
- ippTransformNumber
- The order in which to include this transform in the offer. This order indicates priority.
- ippManual
- Whether the policy is manual (TM_8BIT_YES) or automatic (TM_8BIT_NO). Automatic policies use IKE.