TCP/IP profile record IPSec rule section

This section provides the default filter rule information that is configured on the IPSEC profile statement. There can be multiple sections in the record, one per default filter rule.

Table 1 shows the TCP/IP profile record IPSec Rule section.

Table 1. TCP/IP profile record IPSec Rule section
Offset	Name	Length	Format	Description
0(X'0')	NMTP_IPSREye	4	EBCDIC	IPSR eyecatcher
4(X'4')	NMTP_IPSRFlags	2	Binary	Flags: X'8000', NMTP_IPSRIPv6: If set, addresses are in IPv6 format. X'4000', NMTP_IPSRSrcAddrDef: If set, a source address was specified and fields NMTP_IPSRSrcAddr4 or NMTP_IPSRSrcAddr4 contain the address. If not set, any source address matches the rule. X'2000', NMTP_IPSRDestAddrDef: If set, a destination address was specified and fields NMTP_IPSRDestAddr4 or NMTP_IPSRDestAddr4 contain the address. If not set, any destination address matches the rule. X'1000', NMTP_IPSRLog: If set, LOG was specified. X'0800', NMTP_IPSRProtoDef: If set, a protocol value was specified and field NMTP_IPSRProto contains the value. If not set, any protocol value matches the rule. X'0400', NMTP_IPSRSrcPortDef: If set, a source port was specified and field NMTP_IPSRSrcPort contains the port number. If not set, any source port number matches the rule. X'0200', NMTP_IPSRDestPortDef: NMTP_IPSRDestPortDef: If set, a destination port was specified and field NMTP_IPSRDestPort contains the port number. If not set, any destination port number matches the rule. X'0100', NMTP_IPSRTypeDef: If set, an ICMP, ICMPv6, or OSPF type was specified and field NMTP_IPSRType contains the type value. If not set, any type matches the rule for the specified or defaulted protocol.
4(X'4') (Cont.)				X'0080', NMTP_IPSRCodeDef: If set, an ICMP or ICMPv6 code was specified and field NMTP_IPSRCode contains the code value. If not set, any code matches the rule for the specified or defaulted protocol and type.
6(X'6')	NMTP_IPSRSrcPfxLen	1	Binary	Source address prefix length. If a prefix was not specified, this field is set to zero.
7(X'7')	NMTP_IPSRDestPfxLen	1	Binary	Destination address prefix length. If a prefix was not specified, this field is set to zero.
8(X'8')	NMTP_IPSRProto	1	Binary	If the flag NMTP_IPSRProtoDef is set, this field contains the protocol value.
9(X'9')	NMTP_IPSRType	1	Binary	If the flag NMTP_IPSRTypeDef is set, this field contains the ICMP/ICMPv6/OSPF type value.
10(X'A')	NMTP_IPSRCode	1	Binary	If the flag NMTP_IPSRCodeDef is set, this field contains the ICMP/ICMPv6 code value.
11(X'B')	NMTP_IPSRRoutingType	1	Binary	One of the following ROUTING type values: NMTP_IPSRRTLOCAL(1): ROUTING LOCAL NMTP_IPSRRTROUTED(2): ROUTING ROUTED NMTP_IPSRRTEITHER(3): ROUTING EITHER
12(X'C')	NMTP_IPSRSecClass	1	Binary	SECCLASS value.
13(X'D')		3	Binary	Reserved
16(X'10')	NMTP_IPSRSrcPort	2	Binary	If the flag NMTP_IPSRSrcPortDef is set, this field contains the source port number.
18(X'12')	NMTP_IPSRDestPort	2	Binary	If the flag NMTP_IPSRDestPortDef is set, this field contains the destination port number.
20(X'14')	NMTP_IPSRSrcAddr4	4	Binary	If the flag NMTP_IPSRSrcAddrDef is set, this field contains one of the following values: If the NMTP_IPSRIPv6 flag is not set, this field contains the source address in IPv4 format If the NMTP_IPSRIPv6 flag is set, this field contains the source address in IPv6 format.
20(X'14')	NMTP_IPSRSrcAddr6	16	Binary	One of the following values: If the NMTP_SRCIType value is Destination and the NMTP_SRCIIPv6 flag is not set, this field contains the IPv4 destination IP address. If the NMTP_SRCIType value is Destination and the NMTP_SRCIIPv6 flag is set, this field contains the IPv6 destination IP address.
36(X'24')	NMTP_IPSRDestAddr4	4	Binary	If the flag NMTP_IPSRDestAddrDef is set, this field contains one of the following values: If the NMTP_IPSRIPv6 flag is not set, this field contains the destination address in IPv4 format. If the NMTP_IPSRIPv6 flag is set, this field contains the destination address in IPv6 format.
36(X'24')	NMTP_IPSRDestAddr6	16	Binary	If the flag NMTP_IPSRDestAddrDef is set, this field contains one of the following values: If the NMTP_IPSRIPv6 flag is not set, this field contains the destination address in IPv4 format. If the NMTP_IPSRIPv6 flag is set, this field contains the destination address in IPv6 format..