ipsec_P_Drop.sh File Reference

---

Detailed Description

Proxy-CSCF IPSec drop all Security-Associations on the Proxy-CSCF.

Author:

Dragos Vingarzan vingarzan -at- fokus dot fraunhofer dot de

Definition in file ipsec_P_Drop.sh.

Go to the source code of this file.

Variables
	ue
spddelete $ue[$port_uc] $pcscf[$port_ps] udp P	in
delete $ue $pcscf esp	$spi_ps
spddelete $pcscf[$port_ps] $ue[$port_uc] tcp P	out
spddelete $pcscf[$port_ps] $ue[$port_uc] udp P	out
delete $pcscf $ue esp	$spi_uc
spddelete $pcscf[$port_pc] $ue[$port_us] tcp P	out
spddelete $pcscf[$port_pc] $ue[$port_us] udp P	out
delete $pcscf $ue esp	$spi_us
spddelete $ue[$port_us] $pcscf[$port_pc] tcp P	in
spddelete $ue[$port_us] $pcscf[$port_pc] udp P	in
delete $ue $pcscf esp	$spi_pc

---

Variable Documentation

ue

Initial value:

$1
port_uc=$2
port_us=$3

pcscf=$4
port_pc=$5
port_ps=$6

spi_uc=$7
spi_us=$8

spi_pc=$9
spi_ps=${10}



setkey -c << EOF
spddelete $ue/32[$port_uc] $pcscf/32[$port_ps] tcp -P in

Definition at line 8 of file ipsec_P_Drop.sh.

spddelete $ue [$port_uc] $pcscf [$port_ps] udp P in

Definition at line 26 of file ipsec_P_Drop.sh.

delete $ue $pcscf esp $spi_ps

Definition at line 27 of file ipsec_P_Drop.sh.

spddelete $pcscf [$port_ps] $ue [$port_uc] tcp P out

Definition at line 29 of file ipsec_P_Drop.sh.

spddelete $pcscf [$port_ps] $ue [$port_uc] udp P out

Definition at line 30 of file ipsec_P_Drop.sh.

delete $pcscf $ue esp $spi_uc

Definition at line 31 of file ipsec_P_Drop.sh.

spddelete $pcscf [$port_pc] $ue [$port_us] tcp P out

Definition at line 33 of file ipsec_P_Drop.sh.

spddelete $pcscf [$port_pc] $ue [$port_us] udp P out

Definition at line 34 of file ipsec_P_Drop.sh.

delete $pcscf $ue esp $spi_us

Definition at line 35 of file ipsec_P_Drop.sh.

spddelete $ue [$port_us] $pcscf [$port_pc] tcp P in

Definition at line 37 of file ipsec_P_Drop.sh.

spddelete $ue [$port_us] $pcscf [$port_pc] udp P in

Definition at line 38 of file ipsec_P_Drop.sh.

delete $ue $pcscf esp $spi_pc

Definition at line 39 of file ipsec_P_Drop.sh.

---