19 import "plugins/ikev2/ikev2_types.api";
20 import "vnet/ip/ip_types.api";
21 import "vnet/interface_types.api";
27 define ikev2_plugin_get_version
38 define ikev2_plugin_get_version_reply
49 define ikev2_profile_dump
53 option status=
"in_progress";
60 define ikev2_profile_details
64 option status=
"in_progress";
76 option status =
"in_progress";
84 define ikev2_sa_details
90 option status =
"in_progress";
98 define ikev2_child_sa_dump
104 option vat_help =
"sa_index <index>";
105 option status =
"in_progress";
113 define ikev2_child_sa_details
119 option status =
"in_progress";
128 define ikev2_nonce_get
135 option vat_help =
"initiator|responder sa_index <index>";
136 option status =
"in_progress";
146 define ikev2_nonce_get_reply
153 option status =
"in_progress";
164 define ikev2_traffic_selector_dump
172 option vat_help =
"initiator|responder sa_index <index> child_sa_index <index>";
173 option status =
"in_progress";
182 define ikev2_traffic_selector_details
187 vl_api_ikev2_ts_t
ts;
188 option status =
"in_progress";
197 autoreply define ikev2_profile_add_del
204 option vat_help =
"name <profile_name> [del]";
205 option status=
"in_progress";
217 autoreply define ikev2_profile_set_auth
227 option vat_help =
"name <profile_name> auth_method <method> (auth_data 0x<data> | auth_data <data>)";
228 option status=
"in_progress";
240 autoreply define ikev2_profile_set_id
250 option vat_help =
"name <profile_name> id_type <type> (id_data 0x<data> | id_data <data>) (local|remote)";
251 option status=
"in_progress";
259 autoreply define ikev2_profile_disable_natt
265 option status=
"in_progress";
274 autoreply define ikev2_profile_set_ts
280 vl_api_ikev2_ts_t
ts;
281 option vat_help =
"name <profile_name> protocol <proto> start_port <port> end_port <port> start_addr <ip> end_addr <ip> (local|remote)";
282 option status=
"in_progress";
295 string key_file[256];
296 option vat_help =
"file <absolute_file_path>";
297 option status=
"in_progress";
307 autoreply define ikev2_set_tunnel_interface
314 option status=
"in_progress";
323 autoreply define ikev2_set_responder
330 option vat_help =
"<profile_name> interface <interface> address <addr>";
331 option status=
"in_progress";
340 autoreply define ikev2_set_ike_transforms
346 vl_api_ikev2_ike_transforms_t
tr;
347 option vat_help =
"<profile_name> <crypto alg> <key size> <integrity alg> <DH group>";
348 option status=
"in_progress";
357 autoreply define ikev2_set_esp_transforms
363 vl_api_ikev2_esp_transforms_t
tr;
364 option vat_help =
"<profile_name> <crypto alg> <key size> <integrity alg>";
365 option status=
"in_progress";
377 autoreply define ikev2_set_sa_lifetime
387 option vat_help =
"<profile_name> <seconds> <jitter> <handover> <max bytes>";
388 option status=
"in_progress";
402 option vat_help =
"<profile_name>";
403 option status=
"in_progress";
411 autoreply define ikev2_initiate_del_ike_sa
417 option vat_help =
"<ispi>";
418 option status=
"in_progress";
426 autoreply define ikev2_initiate_del_child_sa
432 option vat_help =
"<ispi>";
433 option status=
"in_progress";
447 option vat_help =
"<ispi>";
448 option status=
"in_progress";
456 autoreply define ikev2_profile_set_udp_encap
462 option status=
"in_progress";
472 autoreply define ikev2_profile_set_ipsec_udp_port
480 option status=
"in_progress";
489 autoreply define ikev2_profile_set_liveness
496 option status=
"in_progress";
clib_error_t * ikev2_initiate_sa_init(vlib_main_t *vm, u8 *name)
vl_api_ikev2_profile_t profile
vl_api_interface_index_t sw_if_index
clib_error_t * ikev2_set_local_key(vlib_main_t *vm, u8 *file)
clib_error_t * ikev2_initiate_rekey_child_sa(vlib_main_t *vm, u32 ispi)
vl_api_ikev2_responder_t responder
vl_api_ikev2_child_sa_t child_sa