/* 01ipsec.cdf - IPsec configuration file */

/*
 * Copyright (c) 2006 Wind River Systems, Inc.
 *
 * The right to copy, distribute or otherwise make use of this software
 * may be licensed only pursuant to the terms of an applicable Wind River
 * license agreement. No license to Wind River intellectual property rights
 * is granted herein. All rights not licensed by Wind River are reserved
 * by Wind River.
 */

/*
modification history
--------------------

*/

#ifdef _WRS_CONFIG_COMPONENT_IPIPSEC
Folder FOLDER_IPSEC {
         NAME           IPSec Components
         CHILDREN       INCLUDE_IP_SECURITY \
         CHILDREN       INCLUDE_IPSECCTRL_CMD \
         CHILDREN       INCLUDE_KEYADM_CMD
        _CHILDREN       FOLDER_NET_L3_NETWORK
}

Component INCLUDE_IP_SECURITY
        {
        NAME            IP Security (IPsec)
        SYNOPSIS        Provide authentication and encryption of ip datagrams
        CONFIGLETTES    ipipsec_config.c
        CFG_PARAMS      IPIPSEC_LARVAL_SA_TMO_SECONDS \
                        IPIPSEC_MAX_TFC_PADDING \
                        IPIPSEC_MAX_TFC_DELAY \
                        IPIPSEC_MIN_TFC_DELAY \
                        IPIPSEC_MAX_DUMMY_SIZE \
                        IPIPSEC_CONF_ENABLE_OUTFILTER \
                        IPIPSEC_CONF_ESP_ENABLE \
                        IPIPSEC_CONF_AH_ENABLE \
                        IPIPSEC_CONF_IPIP_ALLOW \
			IPIPSEC_CONF_SA_CACHE_MAXSIZE \
			IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
        MODULES         ipipsec.o
        }

Parameter IPIPSEC_LARVAL_SA_TMO_SECONDS
        {
        NAME        Larval SA timeout
        SYNOPSIS    Default larval SA (created by getspi) timeout in seconds.
        TYPE        char *
        DEFAULT     "600"
        }

Parameter IPIPSEC_MAX_TFC_PADDING
        {
        NAME        TFC padding
        SYNOPSIS    Maximum TFC padding in bytes
        TYPE        int
        DEFAULT     255
        }

Parameter IPIPSEC_MAX_TFC_DELAY
        {
        NAME        TFC dummy packet generation max delay
        SYNOPSIS    Maximum delay in seconds
        TYPE        int
        DEFAULT     10
        }

Parameter IPIPSEC_MIN_TFC_DELAY
        {
        NAME        TFC dummy packet generation min delay
        SYNOPSIS    Minimum delay in seconds
        TYPE        int
        DEFAULT     5
        }

Parameter IPIPSEC_MAX_DUMMY_SIZE
        {
        NAME        TFC dummy packet max size
        SYNOPSIS    Maximum dummy packet size in bytes
        TYPE        int
        DEFAULT     500
        }

Parameter IPIPSEC_CONF_ENABLE_OUTFILTER
        {
        NAME                    Output filter
        SYNOPSIS                Enable output filter
        TYPE                    int
        DEFAULT                 0
        }

Parameter IPIPSEC_CONF_ESP_ENABLE
        {
        NAME                    Enable ESP
        SYNOPSIS                Enable ESP
        TYPE                    int
        DEFAULT                 1
        }

Parameter IPIPSEC_CONF_AH_ENABLE
        {
        NAME                    Enable AH
        SYNOPSIS                Enable AH
        TYPE                    int
        DEFAULT                 1
        }

Parameter IPIPSEC_CONF_IPIP_ALLOW
        {
        NAME                    Allow IPIP tunneling
        SYNOPSIS                WARNING, IPIP IS A SECURITY RISK! See programmer's guide.
        TYPE                    int
        DEFAULT                 1
        }

Parameter IPIPSEC_CONF_SA_CACHE_MAXSIZE
        {
        NAME                    Configure maximum SA cachesize
        SYNOPSIS                Configure maximum SA cachesize
        TYPE                    int
        DEFAULT                 16
        }

Parameter IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
        {
        NAME                    Configure maximum flow cachesize
        SYNOPSIS                Configure maximum flow cachesize
        TYPE                    int
        DEFAULT                 16
        }

#if defined(_WRS_VX_SMP) || defined(_WRS_CONFIG_SMP)
Component INCLUDE_IP_SECURITY_SMP {
    NAME            IP Security for symmetric multiprocessing (SMP)
    SYNOPSIS        Provides multi-core IPsec for symmetric multiprocessing.
    _CHILDREN       FOLDER_NET_L3_NETWORK
    CONFIGLETTES    ipcom_config.c ipipsec_config.c
    CFG_PARAMS      IPIPSEC_SMP_NUM_CPUS
    INIT_RTN        ipcom_configure_reserved_cpus (IPIPSEC_SMP_NUM_CPUS);
    _INIT_ORDER     usrInit
    INIT_AFTER      INCLUDE_BASE_KERNEL
    INIT_BEFORE     INCLUDE_KERNEL
    MODULES         ipipsec.o
    REQUIRES        INCLUDE_IP_SECURITY
    INCLUDE_WHEN    INCLUDE_IP_SECURITY
}

Parameter IPIPSEC_SMP_NUM_CPUS
        {
        NAME                    Number of CPUs reserved for IPsec in SMP
        SYNOPSIS                Number of CPUs reserved for IPsec in SMP. Must be between 1 \
                    and VX_SMP_NUM_CPUS-1. The reserved CPUs are unavailable for \
                    other VxWorks tasks.
        TYPE                    int
        DEFAULT                 1
        }
#endif


/* This is a hidden component */
Component INCLUDE_IPSECCTRL_CMD {
    NAME        ipsecctrl
    SYNOPSIS    ipsecctrl command
    MODULES     ipipsec_cmd_ipsecctrl.o
    REQUIRES    INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
}

/* This is a hidden component */
Component INCLUDE_KEYADM_CMD {
    NAME        keyadm
    SYNOPSIS    keyadm command
    MODULES     ipipsec_cmd_keyadm.o
    REQUIRES    INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
}
#endif