(racoon 718) Re: Does racoon work with link local IPv6 addresses?

Juan Antonio Martínez Navarro wrote:
>>	-- racoon searches for peer _without_ interface name -- let's provide 
>>it this way!
> 
> Racoon finds peer _without_ interface name, but i think when it tries to
> start up the tunnel, bind fails because it uses peer name without the
> interface. Racoon return this result:

Hmmmm, could you please run setkey -DP and check, do you see interfaces 
in policies. I'm starting to suspect that there is a bug in kenel's 
pfkey implementation, and therefore link-local address interfaces are 
lost in kernel!

> 
> -----------------------------------------------------------------------------
> ...
> DEBUG: configuration found for fe80::202:b3ff:fe60:206e.
> INFO: IPsec-SA request for fe80::202:b3ff:fe60:206e queued due to no
> phase1 found.
> DEBUG: ===
> INFO: initiate new phase 1 negotiation:
> fe80::202:b3ff:feb8:1857[500]<=>fe80::202:b3ff:fe60:206e[500]
> INFO: begin Identity Protection mode.
> DEBUG: new cookie:
> 79b33a35a52af1aa
> DEBUG: add payload of len 48, next type 0
> DEBUG: 80 bytes from fe80::202:b3ff:feb8:1857[500] to
> fe80::202:b3ff:fe60:206e[500]
> DEBUG: sockname 2001:720:1710:0:202:b3ff:feb8:1857[500]
> DEBUG: send packet from fe80::202:b3ff:feb8:1857[500]
> DEBUG: send packet to fe80::202:b3ff:fe60:206e[500] <-----------------
> ERROR: bind 1 (Invalid argument) <------------------------------------
> ERROR: sendfromto failed
> ERROR: failed to begin ipsec sa negotication.
> -------------------------------------------------------------------------