The L2TP_TUNNEL_CONFIG_PARAMS_1 structure<199> is used to get or set configured parameters for L2TP devices.
typedef struct _L2TP_TUNNEL_CONFIG_PARAMS_1 {
DWORD dwIdleTimeout;
// encryption type to be used for L2TP
DWORD dwEncryptionType;
DWORD dwSaLifeTime;
DWORD dwSaDataSizeForRenegotiation;
PROUTER_CUSTOM_L2TP_POLICY_0 customPolicy;
}L2TP_TUNNEL_CONFIG_PARAMS_1,
*PL2TP_TUNNEL_CONFIG_PARAMS_1;
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
dwIdleTimeout |
|||||||||||||||||||||||||||||||
|
dwEncryptionType |
|||||||||||||||||||||||||||||||
|
dwSaLifeTime |
|||||||||||||||||||||||||||||||
|
dwSaDataSizeForRenegotiation |
|||||||||||||||||||||||||||||||
|
customPolicy |
|||||||||||||||||||||||||||||||
dwIdleTimeout (4 bytes): Duration, in seconds, after which the connection will be disconnected if there is no traffic. This value MUST be between 300 and 17,279,999.
dwEncryptionType (4 bytes): Specifies the encryption type to be negotiated for the L2TP tunnel-based VPN connections. One of the following values is used.
|
Value |
Meaning |
|---|---|
|
0 |
RRAS will not negotiate encryption. |
|
1 |
RRAS requests encryption during negotiation. Negotiation will succeed even if remote RRAS does not support encryption. |
|
2 |
RRAS requires encryption to be negotiated. |
|
3 |
RRAS requires maximum-strength encryption to be negotiated. |
dwSaLifeTime (4 bytes): The lifetime of a security association (SA), in seconds, after which the SA is no longer valid [RFC4306]. This value MUST be between 300 and 17,279,999.
dwSaDataSizeForRenegotiation (4 bytes): Number of kilobytes that are allowed to transfer using a SA. After that, the SA is renegotiated [RFC4306]. This value MUST be greater than or equal to 1024.
customPolicy (8 bytes): This MUST be a pointer to ROUTER_CUSTOM_IKEv2_POLICY_0 (section 2.2.1.2.237) that specifies the custom IPSec configurations to be used during the SA negotiation [RFC4306]. The NULL value for this member indicates that no custom IPsec configuration is available.