Ниже в таблице представлен состав структур данных с указанием их полей.
Используются следующие обозначения:
• линия напротив поля структуры указывает на описание структуры, используемой в качестве значения;
• ‘*>’ обозначает, что поле содержит список используемых структур;
• ‘**>’ обозначает, что поле содержит список списков используемых структур;
• жирным шрифтом выделены обязательные поля структуры.
Для упрощения простые типы (число, строка, IP-адрес и т.д.) опущены.
PreserveIPsecSA |
||
AllowNestedIPsec |
||
ResponseTimeMax |
||
|
||
PersistentConnectionRetryDelay |
||
|
||
|
||
|
||
TCPClosedTimeout |
|
|
|
||
|
||
|
||
|
||
|
||
TCPStrictnessLevel |
|
|
UDPNotEstablishedTimeout |
||
UDPEstablishedTimeout |
Receivers-------------------------*> |
|
UDPSessionsMax |
|
|
|
|
|
|
|
|
|
|
LocalIPAddress |
|
|
|
|
|
|
|
Routes---------------------------*> |
|
|
|
|
|
|
|
|
|
|
|
|
Metric |
|
|
Source |
|
|
Table |
|
|
|
NetworkInterface +-----------> |
FilterChain +-------------*> |
|
LogicalName | |
StreamID | |
ProtocolID |
InputFilter--------------+ |
Filters----------+ +-- |
|
OutputFilter-------------+ |
+-- |
DestinationIP |
InputClassification------+ |
AddressPool <*------------------+ |
SourcePort |
OutputClassification-----+ |
|
DestinationPort |
IPsecPolicy--------------+ |
IPsecAction <*--------------------- |
Action ------*> IPsecAction2 |
+-- |
InputFilter |
Log | |
FilterChain <-----------------------+-- |
OutputFilter |
LogEventID | |
|
Label | |
|
[IPv6]TunnelEntry <*-------------+ |
MTU |
PacketType V |
PeerAddress +----- |
Schedule |
|
| |
||
NoSmoothRekeying |
V |
|
Schedule |
||
Periods------+ |
||
ReverseRoute |
| |
|
DSCPHandling |
| |
|
FlowLabel |
| |
|
|
IKERule---------------------+ |
Period <*-----+ |
|
Start |
|
End |
||
Transform |
| |
Action |
| +------*> |
|
|
+-----------------------+ |
LifetimeSeconds +----> |
|
* | |
||
V | |
||
|
||
LifetimeKilobytes +-------*> |
||
| |
|
|
ESPTC26Transform <*---------+ |
AddressPool <*--------------------- |
|
DNSServers |
||
|
DNSSuffixes |
|
|
+--------- |
|
AuthMethod{DSS|RSA|GOST}Sign <*-------- |
------------+------------+--------- |
|
LocalID--------------------------+ |
| |
|
RemoteID-------------------------+ |
V |
|
AuthMethodPreshared +----- |
AAA | |
|
| |
||
LocalID------------+ | |
| |
|
RemoteID-----------+ | |
Transform <-----------------+ |
|
LocalCredential-----------+ | |
| | |
| |
RemoteCredential--------*-+ +---> |
IdentityEntry <-----+ | +-- |
------+ |
AcceptCredentialFrom----*-+ |
KeyID | | |
* |
| |
IPv4Address | | |
V |
CertDescription <---------+--------*-- |
||
EMail | | |
||
FQDN | | |
||
| | |
||
AAARule <--------------------+ | |
||
|
||
RADIUSServer <----------------+-------- |
|
|
IPAddress +-------- |
||
SecretId +-------- |
||
AuthenticationPort +-------- |
||
|
||
|
|
|
|
|
|
|
|
|
TunnelingParameters ---*-------------> |
|
|
|
|
|
Limits ------------------------------- |
-------------------------+--------> |
|
| |
Seconds |
|
| |
Kilobytes |
|
| |
Packets |
|
| |
DerivedConnections |
|
| |
|
|
InputFilter ------+-----------------> |
|
|
OutputFilter ------+ |
| |
|
| |
|
|
| |
|
|
ToPeerOnly |
| |
|
| |
|
|
ContainedProposals ---*-------------> |
|
|
Limits ----------------+ |
|
|
|
||
|
|
|
|
PFSAlg | |
|
|
| |
|
| |
|
|
| |
|
|
| |
|
|
Proposals ---*----------------------> |
|
|
Limits ----------------+ |
|
|
|
||
|
||
PrfAlg | |
|
|
KeyAlg | |
|
|
|
| |
|
|
| |
|
LocalAuth ---*--------+------------*> |
IKEAuth2 | |
|
RemoteAuth ---*--------+ |
Limits ----------------+ |
|
Identity -----------------------> |
||
|
||
IKECFGPool ---*---------> AddressPool |
Credential ---*------------+-----> |
|
|
||
AcceptCredentialFrom --*---+ |
|
|
|
||
| |
|
|
V |
|
|
|
|
|
QKDSource ----*---------------------*> |
|
|
|
||
|
|