aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFilip Tehlar <ftehlar@cisco.com>2018-11-30 07:27:27 -0800
committerMarco Varlese <marco.varlese@suse.de>2018-12-10 14:29:01 +0000
commite351f3501953773fbd3071cd04809c1012ea64b3 (patch)
treebb6aceddc8dcf08793fdf8162d4aaddd84e2821c
parentc90a2aa0f159401823107ca1715813ec108f793f (diff)
Add UDP encap flag
Change-Id: Ic6a8b9aaec7e5dee4fb1971168988dbe4f931f86 Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
-rw-r--r--src/vnet/ipsec/ipsec.api2
-rw-r--r--src/vnet/ipsec/ipsec_api.c1
2 files changed, 3 insertions, 0 deletions
diff --git a/src/vnet/ipsec/ipsec.api b/src/vnet/ipsec/ipsec.api
index 793422d86fb..523def284c3 100644
--- a/src/vnet/ipsec/ipsec.api
+++ b/src/vnet/ipsec/ipsec.api
@@ -562,6 +562,7 @@ define ipsec_spd_interface_details {
@param remote_integ_key - integrity key for inbound IPsec SA
@param renumber - intf display name uses a specified instance if != 0
@param show_instance - instance to display for intf if renumber is set
+ @param udp_encap - enable UDP encapsulation for NAT traversal
*/
define ipsec_tunnel_if_add_del {
u32 client_index;
@@ -585,6 +586,7 @@ define ipsec_tunnel_if_add_del {
u8 remote_integ_key[128];
u8 renumber;
u32 show_instance;
+ u8 udp_encap;
};
/** \brief Add/delete IPsec tunnel interface response
diff --git a/src/vnet/ipsec/ipsec_api.c b/src/vnet/ipsec/ipsec_api.c
index c0e526c3740..a6bccf7a57c 100644
--- a/src/vnet/ipsec/ipsec_api.c
+++ b/src/vnet/ipsec/ipsec_api.c
@@ -469,6 +469,7 @@ vl_api_ipsec_tunnel_if_add_del_t_handler (vl_api_ipsec_tunnel_if_add_del_t *
tun.integ_alg = mp->integ_alg;
tun.local_integ_key_len = mp->local_integ_key_len;
tun.remote_integ_key_len = mp->remote_integ_key_len;
+ tun.udp_encap = mp->udp_encap;
memcpy (&tun.local_ip, mp->local_ip, 4);
memcpy (&tun.remote_ip, mp->remote_ip, 4);
memcpy (&tun.local_crypto_key, &mp->local_crypto_key,