diff options
| author |   Filip Tehlar <ftehlar@cisco.com> | 2020-07-08 13:25:34 +0000 |
|---|---|---|
| committer |   Benoît Ganne <bganne@cisco.com> | 2020-07-15 16:12:16 +0000 |
| commit | a7b963df2758d7c25de366db1999ca1024e12d30 (patch) | |
| tree | 5cbf77b9e1248239b193324dc1af17df15724bd1 /src/plugins/ikev2/ikev2_cli.c | |
| parent | 8046fdc10b14fd161ee81d0a25cfa79793ef698b (diff) | |
ikev2: add support for AES-GCM cipher in IKE
Type: feature
Ticket: VPP-1920
Change-Id: I6e30f3594cb30553f3ca5a35e0a4f679325aacec
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
Diffstat (limited to 'src/plugins/ikev2/ikev2_cli.c')
| -rw-r--r-- | src/plugins/ikev2/ikev2_cli.c | 23 |
1 files changed, 20 insertions, 3 deletions
diff --git a/src/plugins/ikev2/ikev2_cli.c b/src/plugins/ikev2/ikev2_cli.c index 6c75557e41a..30de10b6d95 100644 --- a/src/plugins/ikev2/ikev2_cli.c +++ b/src/plugins/ikev2/ikev2_cli.c @@ -88,9 +88,12 @@ show_ikev2_sa_command_fn (vlib_main_t * vm, vlib_cli_output(vm, " SK_d %U", format_hex_bytes, sa->sk_d, vec_len(sa->sk_d)); - vlib_cli_output(vm, " SK_a i:%U\n r:%U", - format_hex_bytes, sa->sk_ai, vec_len(sa->sk_ai), - format_hex_bytes, sa->sk_ar, vec_len(sa->sk_ar)); + if (sa->sk_ai) + { + vlib_cli_output(vm, " SK_a i:%U\n r:%U", + format_hex_bytes, sa->sk_ai, vec_len(sa->sk_ai), + format_hex_bytes, sa->sk_ar, vec_len(sa->sk_ar)); + } vlib_cli_output(vm, " SK_e i:%U\n r:%U", format_hex_bytes, sa->sk_ei, vec_len(sa->sk_ei), format_hex_bytes, sa->sk_er, vec_len(sa->sk_er)); @@ -355,6 +358,20 @@ ikev2_profile_add_del_command_fn (vlib_main_t * vm, else if (unformat (line_input, + "set %U ike-crypto-alg %U %u ike-dh %U", + unformat_token, valid_chars, &name, + unformat_ikev2_transform_encr_type, &crypto_alg, &tmp1, + unformat_ikev2_transform_dh_type, &dh_type)) + { + r = + ikev2_set_profile_ike_transforms (vm, name, crypto_alg, + IKEV2_TRANSFORM_INTEG_TYPE_NONE, + dh_type, tmp1); + goto done; + } + else + if (unformat + (line_input, "set %U esp-crypto-alg %U %u esp-integ-alg %U", unformat_token, valid_chars, &name, unformat_ikev2_transform_encr_type, &crypto_alg, &tmp1, |