; DICTIONARY FILE - Do NOT modify!
;
; This file contains dictionary translations for parsing
; attribute/value pairs in matching ".cnf" files.


ATTRIBUTE Description             1    string
ATTRIBUTE Local-IP                2    string
ATTRIBUTE Local-Net               3    string
ATTRIBUTE Local-Mask              4    string
ATTRIBUTE Remote-IP               5    string
ATTRIBUTE Remote-IP-2             29   string
ATTRIBUTE Remote-Net              6    string
ATTRIBUTE Remote-Mask             7    string
ATTRIBUTE Inner-IP                8    string
ATTRIBUTE Exclude-Local-IP        30   integer
ATTRIBUTE Exclude-Remote-IP       31   integer
ATTRIBUTE Mode                    32   integer
ATTRIBUTE Reinit                  33   integer
ATTRIBUTE AH                      35   integer
ATTRIBUTE ESP                     36   integer
ATTRIBUTE ISAKMP-Lifetime         38   integer
ATTRIBUTE IPSec-Lifetime          39   integer
ATTRIBUTE SA-Status               40   integer
ATTRIBUTE Auth-Type               41   integer
ATTRIBUTE User-Id                 61   string
ATTRIBUTE Password                65   string
ATTRIBUTE ESP-Key                 70   string
ATTRIBUTE AH-Key                  71   string
ATTRIBUTE Remote-ESP-Key          72   string
ATTRIBUTE Remote-AH-Key           73   string
ATTRIBUTE ESP-Receive-SPI         74   integer
ATTRIBUTE ESP-Transmit-SPI        75   integer
ATTRIBUTE AH-Receive-SPI          76   integer
ATTRIBUTE AH-Transmit-SPI         77   integer
ATTRIBUTE Aggressive              78   integer
ATTRIBUTE Cisco-Delete            79   integer
ATTRIBUTE IP-Compression          80   integer
ATTRIBUTE Preshared-Secret        81   string
ATTRIBUTE Aggressive-Oakley       82   string
ATTRIBUTE Initial-Retry-Delay     83   integer
ATTRIBUTE Remote-Public-Key       84   string
ATTRIBUTE Local-ID                86   string
ATTRIBUTE Remote-ID               87   string
ATTRIBUTE Remote-CA               88   string
ATTRIBUTE PFS                     90   integer
ATTRIBUTE NAT-Traversal           91   integer
ATTRIBUTE Authentication          92   integer
ATTRIBUTE Identification          93   integer
ATTRIBUTE Authorization           94   integer
ATTRIBUTE Vendor-ID               95   integer
ATTRIBUTE Keying-Tries            96   integer
ATTRIBUTE IPv6                    99   integer
ATTRIBUTE IKE-Flags               100  integer
ATTRIBUTE Direct-Nets             101  string
ATTRIBUTE Transform-Order         102  string
ATTRIBUTE Local-Certificate       103  string
ATTRIBUTE Remote-Certificate      104  string
ATTRIBUTE Direct-Ports            105  string
ATTRIBUTE Group-Password          106  string
ATTRIBUTE Custom-IKE-Source-Port  107  string
ATTRIBUTE Custom-IKE-Dest-Port    108  string


#       Exclude-Local-IP
VALUE           Exclude-Local-IP                Yes                     1
VALUE           Exclude-Local-IP                No                      0

#       Exclude-Remote-IP
VALUE           Exclude-Remote-IP               Yes                     1
VALUE           Exclude-Remote-IP               No                      0

#       Mode
VALUE           Mode                            Transport               1
VALUE           Mode                            Tunnel                  2

#       Reinit
VALUE           Reinit                          Yes                     1
VALUE           Reinit                          No                      0

#       AH
VALUE           AH                              No                      0
VALUE           AH                              Yes                     1
VALUE           AH                              MD5                     2
VALUE           AH                              SHA1                    3
VALUE           AH                              NULL-Auth               4

#       ESP
VALUE           ESP                             No                      0
VALUE           ESP                             Yes                     1
VALUE           ESP                             3DES                    2
VALUE           ESP                             DES                     3
VALUE           ESP                             Blowfish                4
VALUE           ESP                             AES                     5
VALUE           ESP                             AES-192                 6
VALUE           ESP                             AES-256                 7
VALUE           ESP                             NULL-ESP                8

#       SA-Status
VALUE           SA-Status                       Enabled                 1
VALUE           SA-Status                       Disabled                0

#       Auth-Type
VALUE           Auth-Type                       IP-Address              0
VALUE           Auth-Type                       Client-IdKeyId          1
VALUE           Auth-Type                       Client-Xauth            2
VALUE           Auth-Type                       Server-Xauth            3
VALUE           Auth-Type                       RSA-Keys                4
VALUE           Auth-Type                       Client-XauthV6          5
VALUE           Auth-Type                       Server-XauthV6          6
VALUE           Auth-Type                       Unused                  7
VALUE           Auth-Type                       X-509                   8

#       Aggressive
VALUE           Aggressive                      Yes                     1
VALUE           Aggressive                      No                      0

#       Cisco-Delete
VALUE           Cisco-Delete                    Yes                     1
VALUE           Cisco-Delete                    No                      0

#       IP-Compression
VALUE           IP-Compression                  No                      0
VALUE           IP-Compression                  Yes                     1
VALUE           IP-Compression                  DEFLATE                 2
VALUE           IP-Compression                  LZS                     3
VALUE           IP-Compression                  Auto                    4

#       Initial-Retry-Delay
VALUE           Initial-Retry-Delay             Fast                    1
VALUE           Initial-Retry-Delay             Medium                  2
VALUE           Initial-Retry-Delay             Slow                    3
VALUE           Initial-Retry-Delay             VerySlow               10

#       NAT-Traversal
VALUE           NAT-Traversal                   No                      0
VALUE           NAT-Traversal                   Auto                    4

#       Authentication
VALUE           Authentication                  PSK                     0
VALUE           Authentication                  Tokencard               3
VALUE           Authentication                  RSA-Keys                4
VALUE           Authentication                  RsaSig                  4

VALUE           Authentication                  X509                    2

#       Identification
VALUE           Identification                  IP-Address              0
VALUE           Identification                  User-FQDN               1
VALUE           Identification                  Host-FQDN               2
VALUE           Identification                  DERASN1                 3
VALUE           Identification                  IdKeyId                 4

#       Authorization
VALUE           Authorization                   None                    0
VALUE           Authorization                   Xauth_Cli               1
VALUE           Authorization                   Xauth_Srv               2
VALUE           Authorization                   XauthV6_Cli             3
VALUE           Authorization                   XauthV6_Srv             4

#       Vendor-ID
#
#  These Vendor-ID features are specific to the InJoy IPSec implementation.
#  The Vendor-ID is a bit-masked value. 
#
#  o Server-Net-Detection allows Road Warriors to auto-detect the VPN Server's
#    internal network/net mask and use it upon establishing the IPSec tunnel.
#
#  The Extended-RW and Server-Extended-RW options are used by the VPN Wizard
#  client and server SAs, respectively, and are combination of the values
#  documented above.
#
VALUE           Vendor-ID                       No                      0
VALUE           Vendor-ID                       Server-Net-Detection    2
VALUE           Vendor-ID                       Extended-RW             2
VALUE           Vendor-ID                       Server-Extended-RW      0

#       IPv6
VALUE           IPv6                            No                      0
VALUE           IPv6                            Yes                     1

#       IKE-Flags
VALUE           IKE-Flags                       None                    0
VALUE           IKE-Flags                       Cisco-PIX               1
VALUE           IKE-Flags                       Filter-Proposals        2
VALUE           IKE-Flags                       Notifications-No-Retransmit   16
VALUE           IKE-Flags                       No-Config-Mode          32

