commit b4a7a7dcf81f85ca3a22c791fb57d7eddc111661
author Filip Tehlar <ftehlar@cisco.com> Fri Nov 30 07:27:27 2018 -0800
committer Neale Ranns <nranns@cisco.com> Mon Dec 03 14:27:13 2018 +0000
tree 2a3caa652332c513916f4b888ba4862e1fa8a886
parent 494a09a3959f3782a7c7f1fa42b7d16a99c98630

Add UDP encap flag

Change-Id: Ic6a8b9aaec7e5dee4fb1971168988dbe4f931f86
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>

src/vnet/ipsec/ipsec.api

diff --git a/src/vnet/ipsec/ipsec.api b/src/vnet/ipsec/ipsec.api
index 148cdcd..610f232 100644
--- a/src/vnet/ipsec/ipsec.api
+++ b/src/vnet/ipsec/ipsec.api
@@ -562,6 +562,7 @@
     @param remote_integ_key - integrity key for inbound IPsec SA
     @param renumber - intf display name uses a specified instance if != 0
     @param show_instance - instance to display for intf if renumber is set
+    @param udp_encap - enable UDP encapsulation for NAT traversal
 */
 define ipsec_tunnel_if_add_del {
   u32 client_index;
@@ -585,6 +586,7 @@
   u8 remote_integ_key[128];
   u8 renumber;
   u32 show_instance;
+  u8 udp_encap;
 };
 
 /** \brief Add/delete IPsec tunnel interface response

src/vnet/ipsec/ipsec_api.c

diff --git a/src/vnet/ipsec/ipsec_api.c b/src/vnet/ipsec/ipsec_api.c
index f233364..3f30a7d 100644
--- a/src/vnet/ipsec/ipsec_api.c
+++ b/src/vnet/ipsec/ipsec_api.c
@@ -470,6 +470,7 @@
   tun.integ_alg = mp->integ_alg;
   tun.local_integ_key_len = mp->local_integ_key_len;
   tun.remote_integ_key_len = mp->remote_integ_key_len;
+  tun.udp_encap = mp->udp_encap;
   memcpy (&tun.local_ip, mp->local_ip, 4);
   memcpy (&tun.remote_ip, mp->remote_ip, 4);
   memcpy (&tun.local_crypto_key, &mp->local_crypto_key,