OpenBSD-4.6/sbin/isakmpd/isakmp_num.cst
# $OpenBSD: isakmp_num.cst,v 1.13 2005/06/25 23:03:38 hshoexer Exp $
# $EOM: isakmp_num.cst,v 1.3 2000/05/17 03:09:50 angelos Exp $
#
# Copyright (c) 1998, 2001 Niklas Hallqvist. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
#
#
# This code was written under funding by Ericsson Radio Systems.
#
# XXX Please fill in references to the drafts, chapter & verse for each
# constant group below.
# Also think about ranges, can they be specified differently? Can we use
# these constants for validity checks?
# ISAKMP payload type.
# see http://www.iana.org/assignments/isakmp-registry
ISAKMP_PAYLOAD
NONE 0
SA 1
PROPOSAL 2
TRANSFORM 3
KEY_EXCH 4
ID 5
CERT 6
CERT_REQ 7
HASH 8
SIG 9
NONCE 10
NOTIFY 11
DELETE 12
VENDOR 13
ATTRIBUTE 14 # IKE Mode-Config attribute
SAK 15 # RFC 3547, SA KEK Payload
SAT 16 # RFC 3547, SA TEK Payload
KD 17 # RFC 3547, Key Download
SEQ 18 # RFC 3547, Sequence Number
POP 19 # RFC 3547, Proof of possession
NAT_D 20 # RFC 3947, NAT Discovery payload
NAT_OA 21 # RFC 3947, NAT Original Address payload
RESERVED_MIN 22
RESERVED_MAX 127
PRIVATE_MIN 128
# values from draft-ietf-ipsec-nat-t-ike-01,02,03.
NAT_D_DRAFT 130 # NAT Discovery payload
NAT_OA_DRAFT 131 # NAT Original Address payload
PRIVATE_MAX 255
MAX 255
.
# ISAKMP exchange types.
ISAKMP_EXCH
NONE 0
BASE 1
ID_PROT 2
AUTH_ONLY 3
AGGRESSIVE 4
INFO 5
# XXX the following are not quite legitimate according to the IETF process
TRANSACTION 6
FUTURE_MIN 7
FUTURE_MAX 31
DOI_MIN 32
DOI_MAX 255
.
# ISAKMP flags.
ISAKMP_FLAGS
ENC 1
COMMIT 2
AUTH_ONLY 4
.
# ISAKMP certificate encoding.
ISAKMP_CERTENC
NONE 0
PKCS 1
PGP 2
DNS 3
X509_SIG 4
X509_KE 5
KERBEROS 6
CRL 7
ARL 8
SPKI 9
X509_ATTR 10
KEYNOTE 11
HASH_URL_PKIX_CERT 12
HASH_URL_PKIX_BUNDLE 13
RESERVED_MIN 14
RESERVED_MAX 255
.
# ISAKMP Notify message types.
ISAKMP_NOTIFY
INVALID_PAYLOAD_TYPE 1
DOI_NOT_SUPPORTED 2
SITUATION_NOT_SUPPORTED 3
INVALID_COOKIE 4
INVALID_MAJOR_VERSION 5
INVALID_MINOR_VERSION 6
INVALID_EXCHANGE_TYPE 7
INVALID_FLAGS 8
INVALID_MESSAGE_ID 9
INVALID_PROTOCOL_ID 10
INVALID_SPI 11
INVALID_TRANSFORM_ID 12
ATTRIBUTES_NOT_SUPPORTED 13
NO_PROPOSAL_CHOSEN 14
BAD_PROPOSAL_SYNTAX 15
PAYLOAD_MALFORMED 16
INVALID_KEY_INFORMATION 17
INVALID_ID_INFORMATION 18
INVALID_CERT_ENCODING 19
INVALID_CERTIFICATE 20
CERT_TYPE_UNSUPPORTED 21
INVALID_CERT_AUTHORITY 22
INVALID_HASH_INFORMATION 23
AUTHENTICATION_FAILED 24
INVALID_SIGNATURE 25
ADDRESS_NOTIFICATION 26
NOTIFY_SA_LIFETIME 27
CERTIFICATE_UNAVAILABLE 28
UNSUPPORTED_EXCHANGE_TYPE 29
UNEQUAL_PAYLOAD_LENGTHS 30
RESERVED_MIN 31
RESERVED_MAX 8191
PRIVATE_MIN 8192
PRIVATE_MAX 16383
STATUS_CONNECTED 16384
STATUS_RESERVED1_MIN 16385
STATUS_RESERVED1_MAX 24575
STATUS_DOI_MIN 24576
STATUS_DOI_MAX 32767
STATUS_PRIVATE_MIN 32768
STATUS_DPD_R_U_THERE 36136
STATUS_DPD_R_U_THERE_ACK 36137
STATUS_PRIVATE_MAX 40959
STATUS_RESERVED2_MIN 40960
STATUS_RESERVED2_MAX 65535
.
# ISAKMP V2 Notify payload types
ISAKMP_V2_NOTIFY
UNSUPPORTED_CRITICAL_PAYLOAD 1
INVALID_IKE_SPI 4
INVALID_MAJOR_VERSION 5
INVALID_SYNTAX 7
INVALID_MESSAGE_ID 9
INVALID_SPI 11
NO_PROPOSAL_CHOSEN 14
AUTHENTICATION_FAILED 24
SINGLE_PAIR_REQUIRED 34
NO_ADDITIONAL_SAS 35
INTERNAL_ADDRESS_FAILURE 36
FAILED_CP_REQUIRED 37
TS_UNACCEPTABLE 38
RESERVED_MIN 39
RESERVED_MAX 8191
PRIVATE_MIN 8192
PRIVATE_MAX 16383
STATUS_RESERVED1_MIN 16384
STATUS_RESERVED1_MAX 24577
STATUS_INITIAL_CONTACT 24578
STATUS_SET_WINDOW_SIZE 24579
STATUS_ADDITIONAL_IS_POSSIBLE 24580
STATUS_IPCOMP_SUPPORTED 24581
STATUS_NAT_DETECTION_SOURCE_IP 24582
STATUS_NAT_DETECTION_DESTINATION_IP 24583
STATUS_COOKIE 24584
STATUS_USE_TRANSPORT_MODE 24585
STATUS_HTTP_CERT_LOOKUP_SUPPORTED 24586
STATUS_RESERVED2_MIN 24587
STATUS_RESERVED2_MAX 40959
STATUS_PRIVATE_MIN 40960
STATUS_PRIVATE_MAX 65535
.
# ISAKMP DOI Identifier.
ISAKMP_DOI
ISAKMP 0
.
# ISAKMP Protocol ID.
ISAKMP_PROTO
ISAKMP 1
.
# ISAKMP transaction message type.
ISAKMP_CFG
REQUEST 1
REPLY 2
SET 3
ACK 4
FUTURE_MIN 5
FUTURE_MAX 127
PRIVATE_MIN 128
PRIVATE_MAX 255
.
# ISAKMP configuration attributes.
ISAKMP_CFG_ATTR
INTERNAL_IP4_ADDRESS 1
INTERNAL_IP4_NETMASK 2
INTERNAL_IP4_DNS 3
INTERNAL_IP4_NBNS 4
INTERNAL_ADDRESS_EXPIRY 5
INTERNAL_IP4_DHCP 6
APPLICATION_VERSION 7
INTERNAL_IP6_ADDRESS 8
INTERNAL_IP6_NETMASK 9
INTERNAL_IP6_DNS 10
INTERNAL_IP6_NBNS 11
INTERNAL_IP6_DHCP 12
INTERNAL_IP4_SUBNET 13
SUPPORTED_ATTRIBUTES 14
INTERNAL_IP6_SUBNET 15
FUTURE_MIN 16
FUTURE_MAX 16383
PRIVATE_MIN 16384
PRIVATE_MAX 32767
.
# ISAKMP EAP
ISAKMP_EAP_CODE
REQUEST 1
RESPONSE 2
SUCCESS 3
FAILURE 4
.
# ISAKMP EAP Types (RFC2284)
ISAKMP_EAP_TYPE
IDENTITY 1
NOTIFICATION 2
NAK 3 # Response only
MD5_CHALLENGE 4
OTP 5
TOKEN 6 # Generic token card
.