[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Revised Mobile IPv6 draft available
Hi,
We are also looking at a mobileipv6 plus ipsec implementation in
AIX 4.3 as prototype and we met the same difficulties than Itojun and
Aaron Griggs.
Which IP address to use for the tunnel IP ? Home address or COA
address?
Where the DES OPT Home address has to be ?
We agree with Aaron that the IP home address must be used but this
one can be hidden in the case where ESP is used causing the difficulty
to retrieve the SA for this address.
We think the probleme is where has to be the Home address header
extension. It is not described enough in the draft.
It is why we suggest to process the destination option Home Address
like the Routing header as described in the IPSEC RFC but this should
be added in the current IPSEC and MobileIPv6 RFCs or drafts.
Like the routing header before the AH or ESP header, that will allow
in any case to retrieve the SA with the Home address IP. After, it
should be only a implementation issue.
About, IPSEC on care-of-address. It can be written as optional or
additionnal like also Aaron proposed in a previous mail.
It is not possible for us to be in Oslo but we are interested by your
conclusion if it impacts future IPSEC and MobileIPv6 specifications.
Nevertheless you can transmit to Francis Dupont we are working with.
Patrice Romand (Patrice.Romand@bull.net)
Aime Le Rouzic (Aime.Lerouzic@bull.net)
Dave Johnson wrote:
>
> >>On Friday of last week, I submitted a revised version of the Mobile IPv6
> >>draft to fix and clear up some of the minor things pointed out at the
> >>last meeting and on the mailing list since. I sent an announcement of
> >>it to the Mobile IP mailing list then, but I forgot to include the IPng
> >>list in my announcement. Here is the list of changes since the
> >>previous version of the draft:
> >
> > There were several questions arose for relationship of mobile-ipv6
> > and ipsec (in here, and ipsec mailing list). Do you have any plan
> > to update that part? Without that update we can't make a complete
> > implementation of mobile-ipv6 (with security considered).
> >
> >itojun
>
> Yes, I believe that is the only remaining place where clarification is
> needed, although I haven't had enough time to read through all the
> IPsec documents myself enough times, and haven't had a chance to talk
> enough with IPsec experts about it, to really get the definitive text
> writtin into the draft for this. I hope to be able to talk with
> implementers and IPsec experts about this in Oslo. Will you be there?
>
> Dave
> > I will
> > Itojun
--
________________________Aime LEROUZIC____________________________
BULL S.A ECHIROLLES FRANCE mailto:Aime.Lerouzic@frec.bull.fr
http://www-frec.bull.com tel: +33 (0)4 76 29 75 51
Communications TCPIP http://intranet/lerouzic
Follow-Ups: