Struct:ttIpsecPolicyPair

Jump to: navigation, search
 
#include trsecapi.h
 
typedef struct tsIpsecPolicyPair
{
#ifdef TM_USE_PRIORITIES
    ttUser16Bit               ippPriority;
#endif /* TM_USE_PRIORITIES */
#ifdef TM_USE_IKE_POLICIES
    ttUser16Bit               ippIkePolicy;
#endif /* TM_USE_IKE_POLICIES */
    ttUser16Bit               ippSelectorIndex;
    ttUser8Bit                ippPlcycontentIndex;
    ttUser8Bit                ippDirection;
#ifdef TM_USE_MULTIPLE_PROPOSALS
    ttUser8Bit                ippProposalNumber;
    ttUser8Bit                ippTransformNumber;
/* when non-zero, designates a manual-only policy (won't key w/IKE) */
    ttUser8Bit                ippManual;
#endif /* TM_USE_MULTIPLE_PROPOSALS */
} ttIpsecPolicyPair;
typedef struct tsIpsecPolicyPair TM_FAR * ttIpsecPolicyPairPtr;
 

Structure Description

ttIpsecPolicyPair will be used when the user calls tfPolicyRestore(). ttIpsecPolicyPair specifies which rules are applied to received packets (TM_IPSEC_INBOUND), sent packets (TM_IPSEC_OUTBOUND), and in what order. Packets matching the direction and the selector[selectorIndex] will be protected by policy_content[plcycontentIndex].


Members

  • ippPriority
    The priority of this policy entry.
  • ippIkePolicy
    The IKE policy to use with this IPsec policy specified by its unique priority.
  • selectorIndex
    The index of the selector lists for this policy. The selector list is initialized as ttIpsecSelectorInString type.
  • plcyContentIndex
    The index of the policy content lists for this policy. The content list is initialized as ttPolicyContentInString type.
  • direction
    The direction of traffic that this policy applies to. This could be TM_IPSEC_INBOUND for inbound packet (receive path), or TM_IPSEC_OUTBOUND for outbound packet(send path), or TM_IPSEC_BOTH_DIRECTION for both receive path and send path.
  • ippProposalNumber
    The order in which to include this proposal in the offer. This order indicates priority.
  • ippTransformNumber
    The order in which to include this transform in the offer. This order indicates priority.
  • ippManual
    Whether the policy is manual (TM_8BIT_YES) or automatic (TM_8BIT_NO). Automatic policies use IKE.