179 lines
5.4 KiB
Mathematica
179 lines
5.4 KiB
Mathematica
/* 01ipsec.cdf - IPsec configuration file */
|
|
|
|
/*
|
|
* Copyright (c) 2006 Wind River Systems, Inc.
|
|
*
|
|
* The right to copy, distribute or otherwise make use of this software
|
|
* may be licensed only pursuant to the terms of an applicable Wind River
|
|
* license agreement. No license to Wind River intellectual property rights
|
|
* is granted herein. All rights not licensed by Wind River are reserved
|
|
* by Wind River.
|
|
*/
|
|
|
|
/*
|
|
modification history
|
|
--------------------
|
|
|
|
*/
|
|
|
|
#ifdef _WRS_CONFIG_COMPONENT_IPIPSEC
|
|
Folder FOLDER_IPSEC {
|
|
NAME IPSec Components
|
|
CHILDREN INCLUDE_IP_SECURITY \
|
|
CHILDREN INCLUDE_IPSECCTRL_CMD \
|
|
CHILDREN INCLUDE_KEYADM_CMD
|
|
_CHILDREN FOLDER_NET_L3_NETWORK
|
|
}
|
|
|
|
Component INCLUDE_IP_SECURITY
|
|
{
|
|
NAME IP Security (IPsec)
|
|
SYNOPSIS Provide authentication and encryption of ip datagrams
|
|
CONFIGLETTES ipipsec_config.c
|
|
CFG_PARAMS IPIPSEC_LARVAL_SA_TMO_SECONDS \
|
|
IPIPSEC_MAX_TFC_PADDING \
|
|
IPIPSEC_MAX_TFC_DELAY \
|
|
IPIPSEC_MIN_TFC_DELAY \
|
|
IPIPSEC_MAX_DUMMY_SIZE \
|
|
IPIPSEC_CONF_ENABLE_OUTFILTER \
|
|
IPIPSEC_CONF_ESP_ENABLE \
|
|
IPIPSEC_CONF_AH_ENABLE \
|
|
IPIPSEC_CONF_IPIP_ALLOW \
|
|
IPIPSEC_CONF_SA_CACHE_MAXSIZE \
|
|
IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
|
|
MODULES ipipsec.o
|
|
}
|
|
|
|
Parameter IPIPSEC_LARVAL_SA_TMO_SECONDS
|
|
{
|
|
NAME Larval SA timeout
|
|
SYNOPSIS Default larval SA (created by getspi) timeout in seconds.
|
|
TYPE char *
|
|
DEFAULT "600"
|
|
}
|
|
|
|
Parameter IPIPSEC_MAX_TFC_PADDING
|
|
{
|
|
NAME TFC padding
|
|
SYNOPSIS Maximum TFC padding in bytes
|
|
TYPE int
|
|
DEFAULT 255
|
|
}
|
|
|
|
Parameter IPIPSEC_MAX_TFC_DELAY
|
|
{
|
|
NAME TFC dummy packet generation max delay
|
|
SYNOPSIS Maximum delay in seconds
|
|
TYPE int
|
|
DEFAULT 10
|
|
}
|
|
|
|
Parameter IPIPSEC_MIN_TFC_DELAY
|
|
{
|
|
NAME TFC dummy packet generation min delay
|
|
SYNOPSIS Minimum delay in seconds
|
|
TYPE int
|
|
DEFAULT 5
|
|
}
|
|
|
|
Parameter IPIPSEC_MAX_DUMMY_SIZE
|
|
{
|
|
NAME TFC dummy packet max size
|
|
SYNOPSIS Maximum dummy packet size in bytes
|
|
TYPE int
|
|
DEFAULT 500
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_ENABLE_OUTFILTER
|
|
{
|
|
NAME Output filter
|
|
SYNOPSIS Enable output filter
|
|
TYPE int
|
|
DEFAULT 0
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_ESP_ENABLE
|
|
{
|
|
NAME Enable ESP
|
|
SYNOPSIS Enable ESP
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_AH_ENABLE
|
|
{
|
|
NAME Enable AH
|
|
SYNOPSIS Enable AH
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_IPIP_ALLOW
|
|
{
|
|
NAME Allow IPIP tunneling
|
|
SYNOPSIS WARNING, IPIP IS A SECURITY RISK! See programmer's guide.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_SA_CACHE_MAXSIZE
|
|
{
|
|
NAME Configure maximum SA cachesize
|
|
SYNOPSIS Configure maximum SA cachesize
|
|
TYPE int
|
|
DEFAULT 16
|
|
}
|
|
|
|
Parameter IPIPSEC_CONF_FLOW_CACHE_MAXSIZE
|
|
{
|
|
NAME Configure maximum flow cachesize
|
|
SYNOPSIS Configure maximum flow cachesize
|
|
TYPE int
|
|
DEFAULT 16
|
|
}
|
|
|
|
#if defined(_WRS_VX_SMP) || defined(_WRS_CONFIG_SMP)
|
|
Component INCLUDE_IP_SECURITY_SMP {
|
|
NAME IP Security for symmetric multiprocessing (SMP)
|
|
SYNOPSIS Provides multi-core IPsec for symmetric multiprocessing.
|
|
_CHILDREN FOLDER_NET_L3_NETWORK
|
|
CONFIGLETTES ipcom_config.c ipipsec_config.c
|
|
CFG_PARAMS IPIPSEC_SMP_NUM_CPUS
|
|
INIT_RTN ipcom_configure_reserved_cpus (IPIPSEC_SMP_NUM_CPUS);
|
|
_INIT_ORDER usrInit
|
|
INIT_AFTER INCLUDE_BASE_KERNEL
|
|
INIT_BEFORE INCLUDE_KERNEL
|
|
MODULES ipipsec.o
|
|
REQUIRES INCLUDE_IP_SECURITY
|
|
INCLUDE_WHEN INCLUDE_IP_SECURITY
|
|
}
|
|
|
|
Parameter IPIPSEC_SMP_NUM_CPUS
|
|
{
|
|
NAME Number of CPUs reserved for IPsec in SMP
|
|
SYNOPSIS Number of CPUs reserved for IPsec in SMP. Must be between 1 \
|
|
and VX_SMP_NUM_CPUS-1. The reserved CPUs are unavailable for \
|
|
other VxWorks tasks.
|
|
TYPE int
|
|
DEFAULT 1
|
|
}
|
|
#endif
|
|
|
|
|
|
/* This is a hidden component */
|
|
Component INCLUDE_IPSECCTRL_CMD {
|
|
NAME ipsecctrl
|
|
SYNOPSIS ipsecctrl command
|
|
MODULES ipipsec_cmd_ipsecctrl.o
|
|
REQUIRES INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
|
|
}
|
|
|
|
/* This is a hidden component */
|
|
Component INCLUDE_KEYADM_CMD {
|
|
NAME keyadm
|
|
SYNOPSIS keyadm command
|
|
MODULES ipipsec_cmd_keyadm.o
|
|
REQUIRES INCLUDE_IPCOM_SHELL_CMD INCLUDE_IP_SECURITY
|
|
}
|
|
#endif
|