Implemented IPsec policies restricted to given network interface

2016-04-09 16:51:02 +02:00
parent 7f57c4f9fb
commit c26e4330e7
8 changed files with 66 additions and 14 deletions
@@ -243,6 +243,13 @@ struct child_cfg_t {
 	 */
 	uint32_t (*get_manual_prio)(child_cfg_t *this);

+	/**
+	 * Get optional network interface restricting IPsec policy
+	 *
+	 * @return				network interface)
+	 */
+	char* (*get_interface)(child_cfg_t *this);
+
 	/**
 	 * Get anti-replay window size
 	 *
@@ -318,6 +325,8 @@ struct child_cfg_create_t {
 	uint32_t tfc;
 	/** Optional manually-set IPsec policy priority */
 	uint32_t priority;
+	/** Optional network interface restricting IPsec policy (cloned) */
+	char *interface;
 	/** lifetime_cfg_t for this child_cfg */
 	lifetime_cfg_t lifetime;
 	/** Inactivity timeout in s before closing a CHILD_SA */