Expand Minimize

IPSEC_TRAFFIC0 structure

The IPSEC_TRAFFIC0 structure specifies parameters to describe IPsec traffic.

Note  IPSEC_TRAFFIC0 is the specific implementation of IPSEC_TRAFFIC used in Windows Vista. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information. For Windows 7 and later, IPSEC_TRAFFIC1 is available.

Syntax


typedef struct IPSEC_TRAFFIC0_ {
  FWP_IP_VERSION     ipVersion;
  union {
    UINT32 localV4Address;
    UINT8  localV6Address[16];
  };
  union {
    UINT32 remoteV4Address;
    UINT8  remoteV6Address[16];
  };
  IPSEC_TRAFFIC_TYPE trafficType;
  union {
    UINT64 ipsecFilterId;
    UINT64 tunnelPolicyId;
  };
  UINT16             remotePort;
} IPSEC_TRAFFIC0;

Members

ipVersion

Internet Protocol (IP) version.

See FWP_IP_VERSION for more information.

localV4Address

The local IPv4 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V4.

localV6Address

The local IPv6 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V6.

remoteV4Address

The remote IPv4 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V4.

remoteV6Address

The remote IPv6 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V6.

trafficType

Type of IPsec traffic.

See IPSEC_TRAFFIC_TYPE for more information.

ipsecFilterId

The LUID of the FWPS transport layer filter corresponding to this traffic.

Available if trafficType is IPSEC_TRAFFIC_TYPE_TRANSPORT.

tunnelPolicyId

The LUID of the associated Quick Mode (QM) tunnel policy.

Available if trafficType is IPSEC_TRAFFIC_TYPE_TUNNEL.

remotePort

The remote TCP/UDP port for this traffic. This is used when the remote port condition in the transport layer filter is more generic than the actual remote port.

Remarks

The IPSEC_TRAFFIC0 type describes the characteristics of the traffic that will match the SA.

For IPsec transport mode, the localV*Address and remoteV*Address members specify the IP addresses. The ipsecFilterId member specifies (as part of the transport layer filter conditions) the transport protocol information (such as IP protocol, ports, etc), of the matching traffic. However, if the remotePort member is nonzero, its value will override the remote port specified in the transport layer filter.

For IPsec tunnel mode, the localV*Address and remoteV*Address members specify the outer IP header tunnel endpoints. The tunnelPolicyId member specifies (as part of the filter conditions specified via FwpmIPsecTunnelAdd0) the inner IP header addresses, transport protocol information, of the matching traffic. The remotePort member should not be specified for tunnel mode.

Requirements

Minimum supported client

Windows Vista [desktop apps only]

Minimum supported server

Windows Server 2008 [desktop apps only]

Header

Ipsectypes.h

IDL

Ipsectypes.idl

See also

Windows Filtering Platform API Structures
FWP_IP_VERSION
IPSEC_TRAFFIC_TYPE

 

 

Community Additions

ADD
Show:
© 2014 Microsoft