ipsec-146.3.tar.gz

[apple/ipsec.git] / ipsec-tools / racoon / isakmp.h

diff --git a/ipsec-tools/racoon/isakmp.h b/ipsec-tools/racoon/isakmp.h
index 06ee511719e91b07f1e07eaeca6a419bc91033c4..628276c04a7ca6661bc54bc4241e3aec4372310e 100644 (file)
--- a/ipsec-tools/racoon/isakmp.h
+++ b/ipsec-tools/racoon/isakmp.h
@@ -348,6 +348,8 @@ struct isakmp_pl_n {
 #define ISAKMP_NTYPE_CERTIFICATE_UNAVAILABLE   28
 #define ISAKMP_NTYPE_UNSUPPORTED_EXCHANGE_TYPE 29
 #define ISAKMP_NTYPE_UNEQUAL_PAYLOAD_LENGTHS   30
+#define ISAKMP_NTYPE_MINERROR                  1
+#define ISAKMP_NTYPE_MAXERROR                  16383
 /* NOTIFY MESSAGES - STATUS TYPES */
 #define ISAKMP_NTYPE_CONNECTED                 16384
 /* 4.6.3 IPSEC DOI Notify Message Types */
@@ -362,6 +364,7 @@ struct isakmp_pl_n {
 #define ISAKMP_NTYPE_LOAD_BALANCE              40501
 #define ISAKMP_NTYPE_HEARTBEAT                 40503
 
+
 /* using only to log */
 #define ISAKMP_LOG_RETRY_LIMIT_REACHED         65530
 
@@ -410,9 +413,9 @@ struct isakmp_pl_attr {
 
 /* IKE fragmentation payload */
 struct isakmp_frag {
-       u_int16_t unknown0;     /* always set to zero? */
+       u_int16_t unknown0; /* Next Payload (1st u_int8_t) and RESERVED (2nd u_int8_t), both must set to 0 */
        u_int16_t len;
-       u_int16_t unknown1;     /* always set to 1? */
+       u_int16_t unknown1;     /* fragid */
        u_int8_t index;
        u_int8_t flags;
 } __attribute__((__packed__)); 
@@ -444,4 +447,15 @@ struct isakmp_pl_lb {
        u_int32_t address;      /* redirect address */
 } __attribute__((__packed__));
 
+/* Responder-Lifetime Notification */
+struct isakmp_pl_resp_lifetime {
+       struct isakmp_gen h;
+       u_int32_t doi;          /* Domain of Interpretation */
+       u_int8_t proto_id;      /* Protocol-Id */
+       u_int8_t spi_size;      /* SPI Size */
+       u_int16_t type;         /* Notify type */
+    /* spi follows next */
+    /* data follows next */
+} __attribute__((__packed__));
+
 #endif /* _ISAKMP_H */