Added in API level 31

Iwlan

class Iwlan
kotlin.Any
   ↳ android.telephony.CarrierConfigManager.Iwlan

Configs used for epdg tunnel bring up.

Summary

Constants
static Int

Server is authenticated using its certificate.
static Int

Certificate sent from the server is ignored.
static Int

Use cellular location to chose epdg server
static Int

Use IPv4 ePDG addresses only.
static Int

Prioritize IPv4 ePDG addresses.
static Int

Prioritize IPv6 ePDG addresses
static Int

Use the epdg address received in protocol configuration options (PCO) from the network.
static Int

Construct the epdg address using plmn.
static Int

Use static epdg address.
static Int

Use Visited Country FQDN rule
static Int

Ike Identification Fully Qualified Domain Name
static Int

Ike Identification opaque octet stream for vendor specific information
static Int

Ike Identification Fully Qualified RFC 822 email address.
static String

Controls if KE payload should be added during child session local rekey procedure.
static String

Time in seconds after which the child security association session is terminated if rekey procedure is not successful.
static String

Time in seconds after which the child session rekey procedure is started.
static String

List of supported key sizes for AES Cipher Block Chaining (CBC) encryption mode of child session.
static String

List of supported key sizes for AES Counter (CTR) encryption mode of child session.
static String

List of supported key sizes for AES Galois/Counter Mode (GCM) encryption mode of child session.
static String

Supported DH groups for IKE negotiation.
static String

Time in seconds after which a dead peer detection (DPD) request is sent.
static String

Type of IP preference used to prioritize ePDG servers.
static String

A priority list of ePDG addresses to be used.
static String

Method used to authenticate epdg server.
static String

Specifies the PCO id for IPv4 Epdg server address
static String

Specifies the PCO id for IPv6 Epdg server address
static String

Epdg static IP address or FQDN for roaming
static String

Epdg static IP address or FQDN
static String

Specifies the local identity type for IKE negotiations.
static String

Time in seconds after which the IKE session is terminated if rekey procedure is not successful.
static String

Time in seconds after which the IKE session rekey procedure is started.
static String

Specifies the remote identity type for IKE negotiations.
static String

List of supported key sizes for AES Cipher Block Chaining (CBC) encryption mode of IKE session.
static String

List of supported key sizes for AES Counter (CTR) encryption mode of IKE session.
static String

List of supported key sizes for AES Galois/Counter Mode (GCM) encryption mode of IKE session.
static String

Maximum number of retries for tunnel establishment.
static String

List of '-' separated MCC/MNCs used to create ePDG FQDN as per 3GPP TS 23.
static String

Time in seconds after which a NATT keep alive message is sent.
static String

Prefix of all Epdg.
static String

List of IKE message retransmission timeouts in milliseconds, where each timeout is the waiting time before next retry, except the last timeout which is the waiting time before terminating the IKE Session.
static String

List of supported AEAD algorithms for child session.
static String

List of supported encryption algorithms for child session.
static String

List of supported AEAD algorithms for IKE session.
static String

List of supported encryption algorithms for IKE session.
static String

List of supported integrity algorithms for IKE session.
static String

List of supported pseudo random function algorithms for IKE session.
static String

Enables the use of multiple Child SA proposals, encompassing both carrier-preferred ciphers and all supported ciphers from 3GPP TS 33.
static String

Controls if the IKE tunnel setup supports EAP-AKA fast reauth
static String

Enables the use of multiple IKE SA proposals, encompassing both carrier-preferred ciphers and all supported ciphers from 3GPP TS 33.

Constants

AUTHENTICATION_METHOD_CERT

Added in API level 31
static val AUTHENTICATION_METHOD_CERT: Int

Server is authenticated using its certificate.

Value: 1

AUTHENTICATION_METHOD_EAP_ONLY

Added in API level 31
static val AUTHENTICATION_METHOD_EAP_ONLY: Int

Certificate sent from the server is ignored. Only Extensible Authentication Protocol (EAP) is used to authenticate the server. EAP_ONLY_AUTH payload is added to IKE_AUTH request if supported.

Value: 0

See Also

    EPDG_ADDRESS_CELLULAR_LOC

    Added in API level 31
    static val EPDG_ADDRESS_CELLULAR_LOC: Int

    Use cellular location to chose epdg server

    Value: 3

    EPDG_ADDRESS_IPV4_ONLY

    Added in API level 34
    static val EPDG_ADDRESS_IPV4_ONLY: Int

    Use IPv4 ePDG addresses only.

    Value: 2

    EPDG_ADDRESS_IPV4_PREFERRED

    Added in API level 34
    static val EPDG_ADDRESS_IPV4_PREFERRED: Int

    Prioritize IPv4 ePDG addresses.

    Value: 0

    EPDG_ADDRESS_IPV6_PREFERRED

    Added in API level 34
    static val EPDG_ADDRESS_IPV6_PREFERRED: Int

    Prioritize IPv6 ePDG addresses

    Value: 1

    EPDG_ADDRESS_PCO

    Added in API level 31
    static val EPDG_ADDRESS_PCO: Int

    Use the epdg address received in protocol configuration options (PCO) from the network.

    Value: 2

    EPDG_ADDRESS_PLMN

    Added in API level 31
    static val EPDG_ADDRESS_PLMN: Int

    Construct the epdg address using plmn.

    Value: 1

    EPDG_ADDRESS_STATIC

    Added in API level 31
    static val EPDG_ADDRESS_STATIC: Int

    Use static epdg address.

    Value: 0

    EPDG_ADDRESS_VISITED_COUNTRY

    Added in API level 33
    static val EPDG_ADDRESS_VISITED_COUNTRY: Int

    Use Visited Country FQDN rule

    Value: 4

    ID_TYPE_FQDN

    Added in API level 31
    static val ID_TYPE_FQDN: Int

    Ike Identification Fully Qualified Domain Name

    Value: 2

    See Also

      ID_TYPE_KEY_ID

      Added in API level 31
      static val ID_TYPE_KEY_ID: Int

      Ike Identification opaque octet stream for vendor specific information

      Value: 11

      See Also

        ID_TYPE_RFC822_ADDR

        Added in API level 31
        static val ID_TYPE_RFC822_ADDR: Int

        Ike Identification Fully Qualified RFC 822 email address.

        Value: 3

        See Also

          KEY_ADD_KE_TO_CHILD_SESSION_REKEY_BOOL

          Added in API level 31
          static val KEY_ADD_KE_TO_CHILD_SESSION_REKEY_BOOL: String

          Controls if KE payload should be added during child session local rekey procedure.

          Value: "iwlan.add_ke_to_child_session_rekey_bool"

          KEY_CHILD_SA_REKEY_HARD_TIMER_SEC_INT

          Added in API level 31
          static val KEY_CHILD_SA_REKEY_HARD_TIMER_SEC_INT: String

          Time in seconds after which the child security association session is terminated if rekey procedure is not successful. If not set or set to <= 0, the default value is 3600 seconds.

          Value: "iwlan.child_sa_rekey_hard_timer_sec_int"

          KEY_CHILD_SA_REKEY_SOFT_TIMER_SEC_INT

          Added in API level 31
          static val KEY_CHILD_SA_REKEY_SOFT_TIMER_SEC_INT: String

          Time in seconds after which the child session rekey procedure is started. If not set or set to <= 0, default value is 3000 seconds.

          Value: "iwlan.child_sa_rekey_soft_timer_sec_int"

          KEY_CHILD_SESSION_AES_CBC_KEY_SIZE_INT_ARRAY

          Added in API level 31
          static val KEY_CHILD_SESSION_AES_CBC_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Cipher Block Chaining (CBC) encryption mode of child session. Possible values are: android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.child_session_aes_cbc_key_size_int_array"

          KEY_CHILD_SESSION_AES_CTR_KEY_SIZE_INT_ARRAY

          Added in API level 31
          static val KEY_CHILD_SESSION_AES_CTR_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Counter (CTR) encryption mode of child session. Possible values are: android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.child_session_aes_ctr_key_size_int_array"

          KEY_CHILD_SESSION_AES_GCM_KEY_SIZE_INT_ARRAY

          Added in API level 35
          static val KEY_CHILD_SESSION_AES_GCM_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Galois/Counter Mode (GCM) encryption mode of child session. Possible values are: android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.child_session_aes_gcm_key_size_int_array"

          KEY_DIFFIE_HELLMAN_GROUPS_INT_ARRAY

          Added in API level 31
          static val KEY_DIFFIE_HELLMAN_GROUPS_INT_ARRAY: String

          Supported DH groups for IKE negotiation. Possible values are: android.net.ipsec.ike.SaProposal#DH_GROUP_NONE, android.net.ipsec.ike.SaProposal#DH_GROUP_1024_BIT_MODP, android.net.ipsec.ike.SaProposal#DH_GROUP_1536_BIT_MODP, android.net.ipsec.ike.SaProposal#DH_GROUP_2048_BIT_MODP, android.net.ipsec.ike.SaProposal#DH_GROUP_3072_BIT_MODP, android.net.ipsec.ike.SaProposal#DH_GROUP_4096_BIT_MODP

          Value: "iwlan.diffie_hellman_groups_int_array"

          KEY_DPD_TIMER_SEC_INT

          Added in API level 31
          static val KEY_DPD_TIMER_SEC_INT: String

          Time in seconds after which a dead peer detection (DPD) request is sent. If not set or set to <= 0, default value is 120 seconds.

          Value: "iwlan.dpd_timer_sec_int"

          KEY_EPDG_ADDRESS_IP_TYPE_PREFERENCE_INT

          Added in API level 34
          static val KEY_EPDG_ADDRESS_IP_TYPE_PREFERENCE_INT: String

          Type of IP preference used to prioritize ePDG servers. Possible values are EPDG_ADDRESS_IPV4_PREFERRED, EPDG_ADDRESS_IPV6_PREFERRED, EPDG_ADDRESS_IPV4_ONLY

          Value: "iwlan.epdg_address_ip_type_preference_int"

          KEY_EPDG_ADDRESS_PRIORITY_INT_ARRAY

          Added in API level 31
          static val KEY_EPDG_ADDRESS_PRIORITY_INT_ARRAY: String

          A priority list of ePDG addresses to be used. Possible values are EPDG_ADDRESS_STATIC, EPDG_ADDRESS_PLMN, EPDG_ADDRESS_PCO, EPDG_ADDRESS_CELLULAR_LOC, EPDG_ADDRESS_VISITED_COUNTRY

          Value: "iwlan.epdg_address_priority_int_array"

          KEY_EPDG_AUTHENTICATION_METHOD_INT

          Added in API level 31
          static val KEY_EPDG_AUTHENTICATION_METHOD_INT: String

          Method used to authenticate epdg server. Possible values are AUTHENTICATION_METHOD_EAP_ONLY, AUTHENTICATION_METHOD_CERT

          Value: "iwlan.epdg_authentication_method_int"

          KEY_EPDG_PCO_ID_IPV4_INT

          Added in API level 31
          static val KEY_EPDG_PCO_ID_IPV4_INT: String

          Specifies the PCO id for IPv4 Epdg server address

          Value: "iwlan.epdg_pco_id_ipv4_int"

          KEY_EPDG_PCO_ID_IPV6_INT

          Added in API level 31
          static val KEY_EPDG_PCO_ID_IPV6_INT: String

          Specifies the PCO id for IPv6 Epdg server address

          Value: "iwlan.epdg_pco_id_ipv6_int"

          KEY_EPDG_STATIC_ADDRESS_ROAMING_STRING

          Added in API level 31
          static val KEY_EPDG_STATIC_ADDRESS_ROAMING_STRING: String

          Epdg static IP address or FQDN for roaming

          Value: "iwlan.epdg_static_address_roaming_string"

          KEY_EPDG_STATIC_ADDRESS_STRING

          Added in API level 31
          static val KEY_EPDG_STATIC_ADDRESS_STRING: String

          Epdg static IP address or FQDN

          Value: "iwlan.epdg_static_address_string"

          KEY_IKE_LOCAL_ID_TYPE_INT

          Added in API level 31
          static val KEY_IKE_LOCAL_ID_TYPE_INT: String

          Specifies the local identity type for IKE negotiations. Possible values are ID_TYPE_FQDN, ID_TYPE_RFC822_ADDR, ID_TYPE_KEY_ID

          Value: "iwlan.ike_local_id_type_int"

          KEY_IKE_REKEY_HARD_TIMER_SEC_INT

          Added in API level 31
          static val KEY_IKE_REKEY_HARD_TIMER_SEC_INT: String

          Time in seconds after which the IKE session is terminated if rekey procedure is not successful. If not set or set to <= 0, default value is 3600 seconds.

          Value: "iwlan.ike_rekey_hard_timer_in_sec"

          KEY_IKE_REKEY_SOFT_TIMER_SEC_INT

          Added in API level 31
          static val KEY_IKE_REKEY_SOFT_TIMER_SEC_INT: String

          Time in seconds after which the IKE session rekey procedure is started. If not set or set to <= 0, default value is 3000 seconds.

          Value: "iwlan.ike_rekey_soft_timer_sec_int"

          KEY_IKE_REMOTE_ID_TYPE_INT

          Added in API level 31
          static val KEY_IKE_REMOTE_ID_TYPE_INT: String

          Specifies the remote identity type for IKE negotiations. Possible values are ID_TYPE_FQDN, ID_TYPE_RFC822_ADDR, ID_TYPE_KEY_ID

          Value: "iwlan.ike_remote_id_type_int"

          KEY_IKE_SESSION_AES_CBC_KEY_SIZE_INT_ARRAY

          Added in API level 31
          static val KEY_IKE_SESSION_AES_CBC_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Cipher Block Chaining (CBC) encryption mode of IKE session. Possible values: android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.ike_session_encryption_aes_cbc_key_size_int_array"

          KEY_IKE_SESSION_AES_CTR_KEY_SIZE_INT_ARRAY

          Added in API level 31
          static val KEY_IKE_SESSION_AES_CTR_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Counter (CTR) encryption mode of IKE session. Possible values - android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.ike_session_encryption_aes_ctr_key_size_int_array"

          KEY_IKE_SESSION_AES_GCM_KEY_SIZE_INT_ARRAY

          Added in API level 35
          static val KEY_IKE_SESSION_AES_GCM_KEY_SIZE_INT_ARRAY: String

          List of supported key sizes for AES Galois/Counter Mode (GCM) encryption mode of IKE session. Possible values - android.net.ipsec.ike.SaProposal#KEY_LEN_UNUSED, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_128, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_192, android.net.ipsec.ike.SaProposal#KEY_LEN_AES_256

          Value: "iwlan.ike_session_encryption_aes_gcm_key_size_int_array"

          KEY_MAX_RETRIES_INT

          Added in API level 31
          static val KEY_MAX_RETRIES_INT: String

          Maximum number of retries for tunnel establishment.

          Value: "iwlan.max_retries_int"

          KEY_MCC_MNCS_STRING_ARRAY

          Added in API level 31
          static val KEY_MCC_MNCS_STRING_ARRAY: String

          List of '-' separated MCC/MNCs used to create ePDG FQDN as per 3GPP TS 23.003

          Value: "iwlan.mcc_mncs_string_array"

          KEY_NATT_KEEP_ALIVE_TIMER_SEC_INT

          Added in API level 31
          static val KEY_NATT_KEEP_ALIVE_TIMER_SEC_INT: String

          Time in seconds after which a NATT keep alive message is sent. If not set or set to <= 0, default value is 20 seconds.

          Value: "iwlan.natt_keep_alive_timer_sec_int"

          KEY_PREFIX

          Added in API level 31
          static val KEY_PREFIX: String

          Prefix of all Epdg.KEY_* constants.

          Value: "iwlan."

          KEY_RETRANSMIT_TIMER_MSEC_INT_ARRAY

          Added in API level 31
          static val KEY_RETRANSMIT_TIMER_MSEC_INT_ARRAY: String

          List of IKE message retransmission timeouts in milliseconds, where each timeout is the waiting time before next retry, except the last timeout which is the waiting time before terminating the IKE Session. Min list length = 1, Max list length = 10 Min timeout = 500 ms, Max timeout = 1800000 ms

          Value: "iwlan.retransmit_timer_sec_int_array"

          KEY_SUPPORTED_CHILD_SESSION_AEAD_ALGORITHMS_INT_ARRAY

          Added in API level 35
          static val KEY_SUPPORTED_CHILD_SESSION_AEAD_ALGORITHMS_INT_ARRAY: String

          List of supported AEAD algorithms for child session. Possible values are android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_8, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_12, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_16

          Value: "iwlan.supported_child_session_aead_algorithms_int_array"

          KEY_SUPPORTED_CHILD_SESSION_ENCRYPTION_ALGORITHMS_INT_ARRAY

          Added in API level 31
          static val KEY_SUPPORTED_CHILD_SESSION_ENCRYPTION_ALGORITHMS_INT_ARRAY: String

          List of supported encryption algorithms for child session. Possible values are android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_CBC, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_CTR

          Value: "iwlan.supported_child_session_encryption_algorithms_int_array"

          KEY_SUPPORTED_IKE_SESSION_AEAD_ALGORITHMS_INT_ARRAY

          Added in API level 35
          static val KEY_SUPPORTED_IKE_SESSION_AEAD_ALGORITHMS_INT_ARRAY: String

          List of supported AEAD algorithms for IKE session. Possible values are android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_8, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_12, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_GCM_16

          Value: "iwlan.supported_ike_session_aead_algorithms_int_array"

          KEY_SUPPORTED_IKE_SESSION_ENCRYPTION_ALGORITHMS_INT_ARRAY

          Added in API level 31
          static val KEY_SUPPORTED_IKE_SESSION_ENCRYPTION_ALGORITHMS_INT_ARRAY: String

          List of supported encryption algorithms for IKE session. Possible values are android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_CBC, android.net.ipsec.ike.SaProposal#ENCRYPTION_ALGORITHM_AES_CTR

          Value: "iwlan.supported_ike_session_encryption_algorithms_int_array"

          KEY_SUPPORTED_INTEGRITY_ALGORITHMS_INT_ARRAY

          Added in API level 31
          static val KEY_SUPPORTED_INTEGRITY_ALGORITHMS_INT_ARRAY: String

          List of supported integrity algorithms for IKE session. Possible values are android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_NONE, android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_HMAC_SHA1_96, android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_AES_XCBC_96, android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_HMAC_SHA2_256_128, android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_HMAC_SHA2_384_192, android.net.ipsec.ike.SaProposal#INTEGRITY_ALGORITHM_HMAC_SHA2_512_256

          Value: "iwlan.supported_integrity_algorithms_int_array"

          KEY_SUPPORTED_PRF_ALGORITHMS_INT_ARRAY

          Added in API level 31
          static val KEY_SUPPORTED_PRF_ALGORITHMS_INT_ARRAY: String

          List of supported pseudo random function algorithms for IKE session. Possible values are android.net.ipsec.ike.SaProposal#PSEUDORANDOM_FUNCTION_HMAC_SHA1, android.net.ipsec.ike.SaProposal#PSEUDORANDOM_FUNCTION_AES128_XCBC, android.net.ipsec.ike.SaProposal#PSEUDORANDOM_FUNCTION_SHA2_256, android.net.ipsec.ike.SaProposal#PSEUDORANDOM_FUNCTION_SHA2_384, android.net.ipsec.ike.SaProposal#PSEUDORANDOM_FUNCTION_SHA2_512

          Value: "iwlan.supported_prf_algorithms_int_array"

          KEY_SUPPORTS_CHILD_SESSION_MULTIPLE_SA_PROPOSALS_BOOL

          Added in API level 35
          static val KEY_SUPPORTS_CHILD_SESSION_MULTIPLE_SA_PROPOSALS_BOOL: String

          Enables the use of multiple Child SA proposals, encompassing both carrier-preferred ciphers and all supported ciphers from 3GPP TS 33.210 and RFC 8221, as defined in RFC 7296.

          Value: "iwlan.supports_child_session_multiple_sa_proposals_bool"

          KEY_SUPPORTS_EAP_AKA_FAST_REAUTH_BOOL

          Added in API level 33
          static val KEY_SUPPORTS_EAP_AKA_FAST_REAUTH_BOOL: String

          Controls if the IKE tunnel setup supports EAP-AKA fast reauth

          Value: "iwlan.supports_eap_aka_fast_reauth_bool"

          KEY_SUPPORTS_IKE_SESSION_MULTIPLE_SA_PROPOSALS_BOOL

          Added in API level 35
          static val KEY_SUPPORTS_IKE_SESSION_MULTIPLE_SA_PROPOSALS_BOOL: String

          Enables the use of multiple IKE SA proposals, encompassing both carrier-preferred ciphers and all supported ciphers from 3GPP TS 33.210 and RFC 8221, as defined in RFC 7296.

          Value: "iwlan.supports_ike_session_multiple_sa_proposals_bool"