diff options
| -rw-r--r-- | src/vnet/ipsec/ipsec_types.api | 2 | ||||
| -rw-r--r-- | src/vnet/ipsec/ipsec_types_api.c | 4 |
2 files changed, 6 insertions, 0 deletions
diff --git a/src/vnet/ipsec/ipsec_types.api b/src/vnet/ipsec/ipsec_types.api index 3015613b3c9..cba22c8c38b 100644 --- a/src/vnet/ipsec/ipsec_types.api +++ b/src/vnet/ipsec/ipsec_types.api @@ -71,6 +71,8 @@ enum ipsec_sad_flags IPSEC_API_SAD_FLAG_IS_TUNNEL_V6 = 0x08, /* enable UDP encapsulation for NAT traversal */ IPSEC_API_SAD_FLAG_UDP_ENCAP = 0x10, + /* IPsec SA is for inbound traffic */ + IPSEC_API_SAD_FLAG_IS_INBOUND = 0x40, }; enum ipsec_proto diff --git a/src/vnet/ipsec/ipsec_types_api.c b/src/vnet/ipsec/ipsec_types_api.c index 0c59e48c645..44b129b3b66 100644 --- a/src/vnet/ipsec/ipsec_types_api.c +++ b/src/vnet/ipsec/ipsec_types_api.c @@ -145,6 +145,8 @@ ipsec_sa_flags_decode (vl_api_ipsec_sad_flags_t in) flags |= IPSEC_SA_FLAG_IS_TUNNEL_V6; if (in & IPSEC_API_SAD_FLAG_UDP_ENCAP) flags |= IPSEC_SA_FLAG_UDP_ENCAP; + if (in & IPSEC_API_SAD_FLAG_IS_INBOUND) + flags |= IPSEC_SA_FLAG_IS_INBOUND; return (flags); } @@ -164,6 +166,8 @@ ipsec_sad_flags_encode (const ipsec_sa_t * sa) flags |= IPSEC_API_SAD_FLAG_IS_TUNNEL_V6; if (ipsec_sa_is_set_UDP_ENCAP (sa)) flags |= IPSEC_API_SAD_FLAG_UDP_ENCAP; + if (ipsec_sa_is_set_IS_INBOUND (sa)) + flags |= IPSEC_API_SAD_FLAG_IS_INBOUND; return clib_host_to_net_u32 (flags); } |