From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 14 May 2025 08:11:12 +0000 (+0200)
Subject: ipsec-types: Add new mode for IP-TFS
X-Git-Tag: 6.0.2dr1~4^2~10
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=419528f2acddbfce566bddd80a825f8b533695e4;p=thirdparty%2Fstrongswan.git

ipsec-types: Add new mode for IP-TFS

Added at the end as the numeric mode is e.g. used in SQL databases.
---

diff --git a/src/libstrongswan/ipsec/ipsec_types.c b/src/libstrongswan/ipsec/ipsec_types.c
index 7d93f275a4..d84c97b395 100644
--- a/src/libstrongswan/ipsec/ipsec_types.c
+++ b/src/libstrongswan/ipsec/ipsec_types.c
@@ -16,12 +16,13 @@
 
 #include "ipsec_types.h"
 
-ENUM(ipsec_mode_names, MODE_TRANSPORT, MODE_DROP,
+ENUM(ipsec_mode_names, MODE_TRANSPORT, MODE_IPTFS,
 	"TRANSPORT",
 	"TUNNEL",
 	"BEET",
 	"PASS",
-	"DROP"
+	"DROP",
+	"IPTFS",
 );
 
 ENUM(policy_dir_names, POLICY_IN, POLICY_FWD,
diff --git a/src/libstrongswan/ipsec/ipsec_types.h b/src/libstrongswan/ipsec/ipsec_types.h
index 4da3e8727c..936e4f86ee 100644
--- a/src/libstrongswan/ipsec/ipsec_types.h
+++ b/src/libstrongswan/ipsec/ipsec_types.h
@@ -51,7 +51,9 @@ enum ipsec_mode_t {
 	/** passthrough policy for traffic without an IPsec SA */
 	MODE_PASS,
 	/** drop policy discarding traffic */
-	MODE_DROP
+	MODE_DROP,
+	/** IP-TFS mode, tunnel mode with aggregation/fragmentation */
+	MODE_IPTFS,
 };
 
 /**