diff options
| author |   Neale Ranns <nranns@cisco.com> | 2019-12-16 00:53:11 +0000 |
|---|---|---|
| committer |   Damjan Marion <dmarion@me.com> | 2020-02-21 09:54:19 +0000 |
| commit | 282872127bbeee6ae59ab3f885c09bad601ee0cc (patch) | |
| tree | 4f1ef8243b194ca8bf6f1acd62ba4a7d688d371e /src/vnet/ipsec/ipsec.api | |
| parent | d057625d499525625d60d2207665eaeb755e380e (diff) | |
ipsec: IPSec protection for multi-point tunnel interfaces
Type: feature
Signed-off-by: Neale Ranns <nranns@cisco.com>
Change-Id: Iaba2ab11bfaa1c8db4023434e3043ac39500f938
Diffstat (limited to 'src/vnet/ipsec/ipsec.api')
| -rw-r--r-- | src/vnet/ipsec/ipsec.api | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/vnet/ipsec/ipsec.api b/src/vnet/ipsec/ipsec.api index 6d34d056003..b5027f60301 100644 --- a/src/vnet/ipsec/ipsec.api +++ b/src/vnet/ipsec/ipsec.api @@ -234,12 +234,16 @@ define ipsec_sad_entry_add_del_reply @param client_index - opaque cookie to identify the sender @param context - sender context, to match reply w/ request @param sw_id_index - Tunnel interface to protect + @param nh - The peer/next-hop on the tunnel to which the traffic + should be protected. For a P2P interface set this to the + all 0s address. @param sa_in - The ID [set] of inbound SAs @param sa_out - The ID of outbound SA */ typedef ipsec_tunnel_protect { vl_api_interface_index_t sw_if_index; + vl_api_address_t nh; u32 sa_out; u8 n_sa_in; u32 sa_in[n_sa_in]; @@ -259,6 +263,7 @@ autoreply define ipsec_tunnel_protect_del u32 context; vl_api_interface_index_t sw_if_index; + vl_api_address_t nh; }; /** |