(usagi-users 03815) Force use of IPsec for MNs

   Hello everyone,

   I have a question about IPsec and MNs: is it possible to force using 
IPsec for MNs registration?

   Because for the moment I have defined a list of nodes that are able 
to register (filtrated by ACL rules) and another list of nodes that 
needs to use IPsec. Here is a sample of the config file of my HA:

DefaultBindingAclPolicy deny;
BindingAclPolicy xxx:yyy:zzz:ttt::2 allow;
BindingAclPolicy xxx:yyy:zzz:ttt::3 allow;
BindingAclPolicy xxx:yyy:zzz:ttt::4 allow;

UseMnHaIPsec enabled;

IPsecPolicySet {
      HomeAgentAddress xxx:yyy:zzz:ttt::1;
      HomeAddress xxx:yyy:zzz:ttt::2/64;
      HomeAddress xxx:yyy:zzz:ttt::3/64;
      HomeAddress xxx:yyy:zzz:ttt::4/64;

      IPsecPolicy HomeRegBinding UseESP;
      IPsecPolicy TunnelMh UseESP;
}

   But here, i am more interested in a sort of possibility to say "If a 
MN want to register, he MUST uses IPSec". In fact, it is a sort of flag 
"DefaultBindingAclPolicy IPsec;". The idea behind this is to add new MNs 
without restarting the HA's daemon or anticipating a list of nodes.

   Does anyone have an idea about this point?


Best regards,
Benoit LE TEXIER.