diff options
| author |   Filip Tehlar <ftehlar@cisco.com> | 2020-04-02 13:13:39 +0000 |
|---|---|---|
| committer |   Neale Ranns <nranns@cisco.com> | 2020-05-15 11:41:14 +0000 |
| commit | 4362baa33c00b93d07f6648c87c064c96900f4df (patch) | |
| tree | f7ffb67f3b6a98348ae4f88ae8d06f8d0ecbeffd /src/plugins/ikev2/ikev2.h | |
| parent | 17b5c3d6ab83a597e7c79613041f2fd7470825bd (diff) | |
ikev2: add support for NAT traversal
Type: feature
* initiator behind NAT supported
* tested with static NAT mappings
* works only with pre-configured tunnels
The pre-configured tunnel has to be defined as follows:
initiator (i) side: src=ip(i) dst=ip(r)
responder (r) side: src=ip(r) dst=ip(nat)
Change-Id: Ia9f79ddbbcc3f7dc8fde6bbeca2a433e3b784e94
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
Diffstat (limited to 'src/plugins/ikev2/ikev2.h')
| -rw-r--r-- | src/plugins/ikev2/ikev2.h | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/plugins/ikev2/ikev2.h b/src/plugins/ikev2/ikev2.h index c701e301ce1..26df41d8595 100644 --- a/src/plugins/ikev2/ikev2.h +++ b/src/plugins/ikev2/ikev2.h @@ -21,7 +21,8 @@ #include <vppinfra/error.h> #define IKEV2_NONCE_SIZE 32 - +#define IKEV2_PORT 500 +#define IKEV2_PORT_NATT 4500 #define IKEV2_KEY_PAD "Key Pad for IKEv2" typedef u8 v8; @@ -91,6 +92,8 @@ typedef CLIB_PACKED (struct { #define IKEV2_PAYLOAD_FLAG_CRITICAL (1<<7) #define IKEV2_PAYLOAD_NONE 0 +#define IKEV2_PAYLOAD_NAT_D 20 +#define IKEV2_PAYLOAD_NAT_OA 21 #define IKEV2_PAYLOAD_SA 33 #define IKEV2_PAYLOAD_KE 34 #define IKEV2_PAYLOAD_IDI 35 |