(racoon 697) Re: Does racoon work with link local IPv6 addresses?

Michal Ludvig <[email protected]> Mon, 6 Sep 2004 15:16:15 +0200 (CEST)
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <[email protected]>
On Mon, 6 Sep 2004, Aidas Kasparas wrote:

> 	What happens if you remove interface names from "remote" and "sainfo"
> statements? As I understand, even without interface name these addresses
> are unique at least site-wide, therefore I expect this should not
> confuse racoon.

They should be unique, yes, but without the interface name unroutable. The
question is if it matters in this case.

> 	If my suggestion is wrong in principle, please provide explanation.

I can only explain why you must use an interface name when connecting to
the other host over link-local address (which is BTW not recommended - why
do you, Juan Antonio, need it?):

Each interface has its own link-local address, but all of them fall into
fe80::/64 prefix. As there is a route to fe80::/64 on each interface you
must explicitly specify through which interface the packet should leave.
Otherwise the kernel would be confused.

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal