(racoon2 59) Neighbor Discovery Process and Racoon2
"Archimedes Gaviola" <[email protected]> Wed, 8 Mar 2006 19:35:14 +0800
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
------_=_NextPart_001_01C642A4.6234376C
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Sir,
=20
This is a follow-up from my previous email "Racoon2 Problem with =
Dual-stack
Configuration on FreeBSD". As what I have tested in IPv6 SAs on my =
FreeBSD 6.0
systems, I am using upper_layer_protocols "any" which covers TCP, UDP =
and
ICMPv6. When I try selecting protocols such as TCP and UDP only and run =
the SPMD
and IKED daemons, IPSec just runs fine. I've suspected the Neighbor =
Discovery
Process since its using ICMPv6 for Neighbor Solicitation and Neighbor
Advertisement process whenever IPv6 nodes communicate with each other in =
a
certain link for transport mode that when you apply IPSec on this =
particular
communication, then two nodes got lost because ICMPv6 is already =
encapsulated.
In IPv4, since is doesn't use Neighbor Discovery Process then upper =
layer
protocols "any" can be specified without any problem. That's why when =
booting up
on FreeBSD systems and apply directly with SPMD and IKED, IPv6 nodes =
cannot
received/reply ICMPv6 messages. Only IPv4 is executing normal. Just =
correct me
if I'm wrong with my suspicion. Thank you.
=20
=20
Sincerely Yours,
=20
Archimedes S. Gaviola
Network Engineer
InfoWeapons Corporation=20
------_=_NextPart_001_01C642A4.6234376C
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.25in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Sir,<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>This is a follow-up from my previous email =
“Racoon2
Problem with Dual-stack Configuration on FreeBSD”. As what I have =
tested in
IPv6 SAs on my FreeBSD 6.0 systems, I am using upper_layer_protocols =
“any”
which covers TCP, UDP and ICMPv6. When I try selecting protocols such as =
TCP
and UDP only and run the SPMD and IKED daemons, IPSec just runs fine. =
I’ve
suspected the Neighbor Discovery Process since its using ICMPv6 for =
Neighbor Solicitation
and Neighbor Advertisement process whenever IPv6 nodes communicate with =
each
other in a certain link for transport mode that when you apply IPSec on =
this
particular communication, then two nodes got lost because ICMPv6 is =
already
encapsulated. In IPv4, since is doesn’t use Neighbor Discovery =
Process
then upper layer protocols “any” can be specified without =
any problem.
That’s why when booting up on FreeBSD systems and apply directly =
with
SPMD and IKED, IPv6 nodes cannot received/reply ICMPv6 messages. Only =
IPv4 is
executing normal. Just correct me if I’m wrong with my suspicion. =
Thank
you.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Sincerely Yours,<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Archimedes S. =
Gaviola<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Network Engineer<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>InfoWeapons Corporation =
<o:p></o:p></span></font></p>
</div>
</body>
</html>
------_=_NextPart_001_01C642A4.6234376C--