package ipsec

Get desktop application:
View/edit binary Protocol Buffers messages

Cryptographic algorithm for encryption

Used in: SecurityAssociations.SA, TunnelInterfaces.Tunnel

• NONE_CRYPTO = 0

• AES_CBC_128 = 1

• AES_CBC_192 = 2

• AES_CBC_256 = 3

Cryptographic algorithm for authentication

Used in: SecurityAssociations.SA, TunnelInterfaces.Tunnel

• NONE_INTEG = 0

• MD5_96 = 1

• SHA1_96 = 2

• SHA_256_96 = 3

• SHA_256_128 = 4

• SHA_384_192 = 5

• SHA_512_256 = 6

• repeated TunnelInterfaces.Tunnel tunnels = 1

• repeated SecurityPolicyDatabases.SPD spds = 2

• repeated SecurityAssociations.SA sas = 3

Security Association (SA)

• repeated SecurityAssociations.SA sas = 1

Used in: ResyncRequest, SecurityAssociations

• string name = 1

  security association name

• uint32 spi = 2

  security parameter index

• SA.IPSecProtocol protocol = 3

• CryptoAlgorithm crypto_alg = 4

• string crypto_key = 5

• IntegAlgorithm integ_alg = 6

• string integ_key = 7

• bool use_esn = 8

  Use extended sequence number

• bool use_anti_replay = 9

  Use anti replay

• string tunnel_src_addr = 10

• string tunnel_dst_addr = 11

• bool enable_udp_encap = 12

  Enable UDP encapsulation for NAT traversal

IPSec protocol

Used in: SA

• AH = 0

• ESP = 1

Security Policy Database (SPD)

• repeated SecurityPolicyDatabases.SPD spds = 1

  list of all SPDs

Used in: ResyncRequest, SecurityPolicyDatabases

• string name = 1

• repeated SPD.Interface interfaces = 2

  list of interfaces belonging to this SPD

• repeated SPD.PolicyEntry policy_entries = 3

  list of policy entries belonging to this SPD

Interface

Used in: SPD

• string name = 1

  interface name

Policy Entry

Used in: SPD

• string sa = 1

  security association name

• int32 priority = 2

• bool is_outbound = 3

• string remote_addr_start = 4

• string remote_addr_stop = 5

• string local_addr_start = 6

• string local_addr_stop = 7

• uint32 protocol = 8

• uint32 remote_port_start = 9

• uint32 remote_port_stop = 10

• uint32 local_port_start = 11

• uint32 local_port_stop = 12

• PolicyEntry.Action action = 13

  policy action

Policy action

Used in: PolicyEntry

• BYPASS = 0

• DISCARD = 1

• PROTECT = 3

  RESOLVE = 2; // unused in VPP

Tunnel Interfaces

• repeated TunnelInterfaces.Tunnel tunnels = 1

Used in: ResyncRequest, TunnelInterfaces

• string name = 1

  tunnel name

• bool esn = 2

  extended sequence number

• bool anti_replay = 3

  anti replay option

• string local_ip = 4

• string remote_ip = 5

• uint32 local_spi = 6

• uint32 remote_spi = 7

• CryptoAlgorithm crypto_alg = 8

• string local_crypto_key = 9

• string remote_crypto_key = 10

• IntegAlgorithm integ_alg = 11

• string local_integ_key = 12

• string remote_integ_key = 13

• bool enabled = 100

  Extra fields related to interface

• repeated string ip_addresses = 101

• uint32 vrf = 102