IPSEC_TRAFFIC0 structure (ipsectypes.h)

The IPSEC_TRAFFIC0 structure specifies parameters to describe IPsec traffic. IPSEC_TRAFFIC1 is available.

Syntax

typedef struct IPSEC_TRAFFIC0_ {
  FWP_IP_VERSION     ipVersion;
  union {
    UINT32 localV4Address;
    UINT8  localV6Address[16];
  };
  union {
    UINT32 remoteV4Address;
    UINT8  remoteV6Address[16];
  };
  IPSEC_TRAFFIC_TYPE trafficType;
  union {
    UINT64 ipsecFilterId;
    UINT64 tunnelPolicyId;
  };
  UINT16             remotePort;
} IPSEC_TRAFFIC0;

Members

ipVersion

Internet Protocol (IP) version.

See FWP_IP_VERSION for more information.

localV4Address

The local IPv4 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V4.

localV6Address[16]

The local IPv6 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V6.

remoteV4Address

The remote IPv4 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V4.

remoteV6Address[16]

The remote IPv6 address of the IPsec traffic.

Specified when ipVersion is FWP_IP_VERSION_V6.

trafficType

Type of IPsec traffic.

See IPSEC_TRAFFIC_TYPE for more information.

ipsecFilterId

The LUID of the FWPS transport layer filter corresponding to this traffic.

Available if trafficType is IPSEC_TRAFFIC_TYPE_TRANSPORT.

tunnelPolicyId

The LUID of the associated Quick Mode (QM) tunnel policy.

Available if trafficType is IPSEC_TRAFFIC_TYPE_TUNNEL.

remotePort

The remote TCP/UDP port for this traffic. This is used when the remote port condition in the transport layer filter is more generic than the actual remote port.

Remarks

The IPSEC_TRAFFIC0 type describes the characteristics of the traffic that will match the SA.

For IPsec transport mode, the localVAddress and remoteVAddress members specify the IP addresses. The ipsecFilterId member specifies (as part of the transport layer filter conditions) the transport protocol information (such as IP protocol, ports, etc), of the matching traffic. However, if the remotePort member is nonzero, its value will override the remote port specified in the transport layer filter.

For IPsec tunnel mode, the localVAddress and remoteVAddress members specify the outer IP header tunnel endpoints. The tunnelPolicyId member specifies (as part of the filter conditions specified via FwpmIPsecTunnelAdd0) the inner IP header addresses, transport protocol information, of the matching traffic. The remotePort member should not be specified for tunnel mode.

Requirements

See also

FWP_IP_VERSION

IPSEC_TRAFFIC_TYPE

Windows Filtering Platform API Structures