2.2.1.2.270 L2TP_TUNNEL_CONFIG_PARAMS_1

  • Article

The L2TP_TUNNEL_CONFIG_PARAMS_1 structure<199> is used to get or set configured parameters for L2TP devices.

 typedef struct _L2TP_TUNNEL_CONFIG_PARAMS_1 {
     DWORD                       dwIdleTimeout;
     // encryption type to be used for L2TP
     DWORD                       dwEncryptionType;
     DWORD                       dwSaLifeTime;
     DWORD                       dwSaDataSizeForRenegotiation;
            
     PROUTER_CUSTOM_L2TP_POLICY_0 customPolicy;
 }L2TP_TUNNEL_CONFIG_PARAMS_1, 
 *PL2TP_TUNNEL_CONFIG_PARAMS_1;
           


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

dwIdleTimeout

dwEncryptionType

dwSaLifeTime

dwSaDataSizeForRenegotiation

customPolicy

dwIdleTimeout (4 bytes): Duration, in seconds, after which the connection will be disconnected if there is no traffic. This value MUST be between 300 and 17,279,999.

dwEncryptionType (4 bytes): Specifies the encryption type to be negotiated for the L2TP tunnel-based VPN connections. One of the following values is used.

Value

Meaning

0

RRAS will not negotiate encryption.

1

RRAS requests encryption during negotiation. Negotiation will succeed even if remote RRAS does not support encryption.

2

RRAS requires encryption to be negotiated.

3

RRAS requires maximum-strength encryption to be negotiated.

dwSaLifeTime (4 bytes): The lifetime of a security association (SA), in seconds, after which the SA is no longer valid [RFC4306]. This value MUST be between 300 and 17,279,999.

dwSaDataSizeForRenegotiation (4 bytes): Number of kilobytes that are allowed to transfer using a SA. After that, the SA is renegotiated [RFC4306]. This value MUST be greater than or equal to 1024.

customPolicy (8 bytes): This MUST be a pointer to ROUTER_CUSTOM_IKEv2_POLICY_0 (section 2.2.1.2.237) that specifies the custom IPSec configurations to be used during the SA negotiation [RFC4306]. The NULL value for this member indicates that no custom IPsec configuration is available.