Documentation/netlabel/draft-ietf-cipso-ipsecurity-01.txt

449 HOST_LABEL_MAX - This parameter contains the maximum sensitivity label that
452 parameter does not apply to CIPSO gateways or routers.  This parameter need
467 HOST_LABEL_MIN - This parameter contains the minimum sensitivity label that
469 than this minimum MUST be rejected by the CIPSO host.  This parameter does
470 not apply to CIPSO gateways or routers.  This parameter need not be defined
474 PORT_LABEL_MAX - This parameter contains the maximum sensitivity label for
477 rejected by the CIPSO system.  The label within this parameter MUST be
478 less than or equal to the label within the HOST_LABEL_MAX parameter.  This
479 parameter does not apply to CIPSO hosts that support only one network port.
481 PORT_LABEL_MIN - This parameter contains the minimum sensitivity label for
484 rejected by the CIPSO system.  The label within this parameter MUST be
485 greater than or equal to the label within the HOST_LABEL_MIN parameter.
486 This parameter does not apply to CIPSO hosts that support only one network
489 PORT_DOI - This parameter is used to assign a DOI identifier value to a
492 hosts and gateways MUST support either this parameter, the NET_DOI
493 parameter, or the HOST_DOI parameter.
495 NET_DOI - This parameter is used to assign a DOI identifier value to a
498 CIPSO hosts and gateways MUST support either this parameter, the PORT_DOI
499 parameter, or the HOST_DOI parameter.
501 HOST_DOI - This parameter is used to assign a DOI identifier value to a
504 hosts and gateways MUST support either this parameter, the PORT_DOI
505 parameter, or the NET_DOI parameter.
545 only required to support a NET_LABEL parameter.  This parameter contains
548 is not equivalent to the NET_LABEL parameter.
577 recognized the IP datagram is discarded and an ICMP "parameter problem"
579 parameter" (code 0) and the pointer is set to the start of the CIPSO field
613 unrecognized tag type MUST be treated as a "parameter problem" and
630 discarded and an ICMP "parameter problem" (type 12) is generated and
665 the PORT_DOI configuration parameter MUST contain the DOI identifier to
666 use.  If network level DOI assignment is used, then the NET_DOI parameter
668 is employed, then the HOST_DOI parameter MUST contain the DOI identifier