Поделиться через

2.2.39 FW_GLOBAL_CONFIG_IPSEC_EXEMPT_VALUES

  • Статья

This enumeration identifies specific traffic to be exempted from performing IPsec.

 typedef  enum _FW_GLOBAL_CONFIG_IPSEC_EXEMPT_VALUES
 {
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NONE = 0x0000,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NEIGHBOR_DISC = 0x0001,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ICMP = 0x0002,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ROUTER_DISC = 0x0004,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_DHCP = 0x0008,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_MAX = 0x0010,
   FW_GLOBAL_CONFIG_IPSEC_EXEMPT_MAX_V2_0 = 0x0004
 } FW_GLOBAL_CONFIG_IPSEC_EXEMPT_VALUES;

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NONE:  No IPsec exemptions.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_NEIGHBOR_DISC:  Exempt neighbor discover IPv6 ICMP type-codes from IPsec.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ICMP:  Exempt ICMP from IPsec.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_ROUTER_DISC:  Exempt router discover IPv6 ICMP type-codes from IPsec.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_DHCP:  Exempt both IPv4 and IPv6 DHCP traffic from IPsec.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_MAX:  This value and values that exceed this value are not valid and MUST NOT be used. It is defined for simplicity in writing IDL definitions and code. This symbolic constant has a value of 0x0010.

FW_GLOBAL_CONFIG_IPSEC_EXEMPT_MAX_V2_0:  This value and values that exceed this value are not valid and MUST NOT be used by servers and clients with schema version 0x0200 and earlier. It is defined for simplicity in writing IDL definitions and code. This symbolic constant has a value of 0x0004.