Hi,
Juan Antonio MartÃnez Navarro reported to racoon mailing list problem setting ipsec policies with link-local ipv6 addresses. I traced problem to:
- without scope_id ISAKMP daemon do not know on which interface it should try to contact peer for key exchange;
- scope_id is lost in kernel, because xfrm_address_t do not have space allocated to store it.
Therefore questions:
1) should this be fixed at all?
2) if yes, in what way:
a) by adding space in xfrm_address_t for storing scope_id;
b) by storing scope_id within ipv6 address (starting at third[?] byte)
c) scope_id will not be stored in kernel; ISAKMP deamon should find out scope_id by finding interface which have link-local address equal to one found in policy.
I will make changes needed. Just tell me what is the proper way to fix.
-- Aidas Kasparas IT administrator GM Consult Group, UAB
- : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
