| # |
| # XFRM configuration |
| # |
| config XFRM |
| bool |
| depends on NET |
| |
| config XFRM_USER |
| tristate "Transformation user configuration interface" |
| depends on INET && XFRM |
| ---help--- |
| Support for Transformation(XFRM) user configuration interface |
| like IPsec used by native Linux tools. |
| |
| If unsure, say Y. |
| |
| config XFRM_SUB_POLICY |
| bool "Transformation sub policy support (EXPERIMENTAL)" |
| depends on XFRM && EXPERIMENTAL |
| ---help--- |
| Support sub policy for developers. By using sub policy with main |
| one, two policies can be applied to the same packet at once. |
| Policy which lives shorter time in kernel should be a sub. |
| |
| If unsure, say N. |
| |
| config NET_KEY |
| tristate "PF_KEY sockets" |
| select XFRM |
| ---help--- |
| PF_KEYv2 socket family, compatible to KAME ones. |
| They are required if you are going to use IPsec tools ported |
| from KAME. |
| |
| Say Y unless you know what you are doing. |
| |
| |