[support] Bls: Support Digest, Vol 40, Issue 2
Brama Subhifajar
first_shaboo at yahoo.com
Fri Feb 6 21:57:18 JST 2009
hai,
sorry for late replay, I try to configure again script in Mobile Node and Home Agent and it is working well.
I dont know about how to configure sa.conf, can you give me the advice how to configure sa.conf ?
and I have tried my Mobile IPv6 network not using IPSec for finding signaling time when Mobile Node change network. when I try move to Foreign Network its work fine, but when I back to Home network the communication is break. it is the logfile :
root at brama-laptop:/home/brama# mip6d -c /usr/local/etc/mip6d.conf -d 10
mip6d[5984]: MIPL Mobile IPv6 for Linux v2.0.2-umip-0.4 started (Mobile Node)
Fri Feb 6 19:14:13 main: MIPL Mobile IPv6 for Linux started in debug mode, not detaching from terminal
Fri Feb 6 19:14:13 conf_show: config_file = /usr/local/etc/mip6d.conf
Fri Feb 6 19:14:13 conf_show: vt_hostname = localhost
Fri Feb 6 19:14:13 conf_show: vt_service = 7777
Fri Feb 6 19:14:13 conf_show: mip6_entity = 1
Fri Feb 6 19:14:13 conf_show: debug_level = 10
Fri Feb 6 19:14:13 conf_show: debug_log_file = stderr
Fri Feb 6 19:14:13 conf_show: PolicyModulePath = [internal]
Fri Feb 6 19:14:13 conf_show: DefaultBindingAclPolicy = 0
Fri Feb 6 19:14:13 conf_show: NonVolatileBindingCache = disabled
Fri Feb 6 19:14:13 conf_show: KeyMngMobCapability = enabled
Fri Feb 6 19:14:13 conf_show: UseMnHaIPsec = disabled
Fri Feb 6 19:14:13 conf_show: MnMaxHaBindingLife = 262140
Fri Feb 6 19:14:13 conf_show: MnMaxCnBindingLife = 420
Fri Feb 6 19:14:13 conf_show: MnRouterProbes = 1
Fri Feb 6 19:14:13 conf_show: MnRouterProbeTimeout = 0.000000
Fri Feb 6 19:14:13 conf_show: InitialBindackTimeoutFirstReg = 1.500000
Fri Feb 6 19:14:13 conf_show: InitialBindackTimeoutReReg = 1.000000
Fri Feb 6 19:14:13 conf_show: UseCnBuAck = enabled
Fri Feb 6 19:14:13 conf_show: DoRouteOptimizationMN = enabled
Fri Feb 6 19:14:13 conf_show: MnUseAllInterfaces = disabled
Fri Feb 6 19:14:13 conf_show: MnDiscardHaParamProb = enabled
Fri Feb 6 19:14:13 conf_show: SendMobPfxSols = enabled
Fri Feb 6 19:14:13 conf_show: OptimisticHandoff = disabled
Fri Feb 6 19:14:13 conf_show: MobRtrUseExplicitMode = enabled
Fri Feb 6 19:14:13 conf_show: SendMobPfxAdvs = enabled
Fri Feb 6 19:14:13 conf_show: SendUnsolMobPfxAdvs = enabled
Fri Feb 6 19:14:13 conf_show: MaxMobPfxAdvInterval = 86400
Fri Feb 6 19:14:13 conf_show: MinMobPfxAdvInterval = 600
Fri Feb 6 19:14:13 conf_show: HaMaxBindingLife = 262140
Fri Feb 6 19:14:13 conf_show: HaAcceptMobRtr = disabled
Fri Feb 6 19:14:13 conf_show: DoRouteOptimizationCN = enabled
Fri Feb 6 19:14:13 xfrm_cn_init: Adding policies and states for CN
Fri Feb 6 19:14:13 xfrm_mn_init: Adding policies and states for MN
Fri Feb 6 19:14:13 conf_home_addr_info: HoA address 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:14:13 conf_home_addr_info: HA address 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:14:13 __tunnel_add: created tunnel ip6tnl1 (6) from 2001:660:4701:2:0:0:0:12 to 2001:660:4701:2:0:0:0:1 user count 1
Fri Feb 6 19:14:13 conf_home_addr_info: Home address 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:14:13 flag_hoa: set HoA 2001:660:4701:2:0:0:0:12/128 iif 6 flags 12 preferred_time 4294967295 valid_time 4294967295
Fri Feb 6 19:14:13 conf_home_addr_info: Added new home_addr_info successfully
mip6d[5984]: Interface 2 (ip6tnl0):type 769 unsupported
Fri Feb 6 19:14:13 __md_discover_router: discover link on iface ath0 (4)
mip6d[5984]: Interface 6 (ip6tnl1):type 769 unsupported
mip6d[5984]: Interface 6 (ip6tnl1):type 769 unsupported
Fri Feb 6 19:14:13 md_change_default_router: add new router fe80:0:0:0:21e:58ff:fe31:c1c3 on interface ath0 (4)
Fri Feb 6 19:14:13 md_update_router_stats: add coa 2001:660:4701:2:221:63ff:fe30:5e7b on interface (4)
Fri Feb 6 19:14:14 mn_addr_do_dad: DAD succeeded!
Fri Feb 6 19:14:14 mn_addr_do_dad: address = 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:14:14 mn_move: 1751
Fri Feb 6 19:14:14 mn_move: in home net
Fri Feb 6 19:14:14 mv_hoa: move HoA 2001:660:4701:2:0:0:0:12/64 from iface 6 to 4
Fri Feb 6 19:15:07 md_expire_router: expiring router fe80:0:0:0:21e:58ff:fe31:c1c3 on iface ath0 (4)
Fri Feb 6 19:15:09 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:15:09 md_change_default_router: add new router fe80:0:0:0:20b:6aff:feb9:461b on interface ath0 (4)
Fri Feb 6 19:15:09 md_update_router_stats: add coa 2001:660:4701:4:221:63ff:fe30:5e7b on interface (4)
Fri Feb 6 19:15:11 mn_move: 1751
Fri Feb 6 19:15:11 mn_move: in foreign net
Fri Feb 6 19:15:11 mv_hoa: move HoA 2001:660:4701:2:0:0:0:12/128 from iface 4 to 6
Fri Feb 6 19:15:11 mn_send_home_bu: 789
Fri Feb 6 19:15:11 mn_get_home_lifetime: CoA lifetime 2591998 s, HoA lifetime 2591941 s, BU lifetime 262140 s
Fri Feb 6 19:15:11 mn_ro_pol_add: Adding default RO triggering policies for all Correspondent Nodes
Fri Feb 6 19:15:11 process_first_home_bu: New bule for HA
Fri Feb 6 19:15:11 bul_add: Adding bule
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:2:0:0:0:1
lifetime = 262140, delay = 1500
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:11 mn_send_home_bu: New bule for HA
Fri Feb 6 19:15:11 mh_send: sending MH type 5
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:11 mh_send: local CoA 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:11 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:2:0:0:0:1
lifetime = 262140, delay = 1500
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:11 tunnel_mod: modifying tunnel 6 end points with from 2001:660:4701:4:221:63ff:fe30:5e7b to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:11 __tunnel_mod: modified tunnel iface ip6tnl1 (6)from 2001:660:4701:4:221:63ff:fe30:5e7b to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:12 mn_recv_ba: 1039
Fri Feb 6 19:15:12 mn_recv_ba: Got BA from 2001:660:4701:2:0:0:0:1 to home address 2001:660:4701:2:0:0:0:12 with coa 2001:660:4701:4:221:63ff:fe30:5e7b and status 0
Fri Feb 6 19:15:12 mn_recv_ba: Dumping corresponding BULE
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:2:0:0:0:1
lifetime = 262140, delay = 1500
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:12 mpd_schedule_first_mps: schedule MPS in 2 s
Fri Feb 6 19:15:12 set_bule_lifetime: Set bule lifetime to 262140 (s) and resend to bule->delay 249033 (s)
Fri Feb 6 19:15:12 mn_recv_ba: Callback to bu_refresh after 249033 seconds
Fri Feb 6 19:15:12 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:2:0:0:0:1
lifetime = 262140, delay = 249033000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:12 mn_start_ro: MN: Start RO to 2001:660:4701:3:0:0:0:20, from 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:12 bul_add: Adding bule
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:3:0:0:0:20
lifetime = 210, delay = 210000
flags: IP6_MH_BU_ACK
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rre_create: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:12 rre_create: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 mn_rr_cond_start_hot: Home keygen token not valid, send HoTI
Fri Feb 6 19:15:12 mh_send: sending MH type 1
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rre_create: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:12 rre_create: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 mn_rr_cond_start_cot: Care-of keygen token not valid, send CoTI
Fri Feb 6 19:15:12 mh_send: sending MH type 2
from 2001:660:4701:4:221:63ff:fe30:5e7b
to 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 mn_recv_hot: Still waiting for CoT, not sending BU
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:12 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 mn_recv_cot: Got CoT and found RR entry for home address
Fri Feb 6 19:15:12 mh_send: sending MH type 5
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:15:12 mh_send: local CoA 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:15:12 mh_send: Adding bind auth data
Fri Feb 6 19:15:12 mh_send: Adding auth_data
Fri Feb 6 19:15:12 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:3:0:0:0:20
lifetime = 420, delay = 1000
flags: IP6_MH_BU_ACK
Fri Feb 6 19:15:12 mn_recv_ba: 1039
Fri Feb 6 19:15:12 mn_recv_ba: Got BA from 2001:660:4701:3:0:0:0:20 to home address 2001:660:4701:2:0:0:0:12 with coa 2001:660:4701:4:221:63ff:fe30:5e7b and status 0
Fri Feb 6 19:15:12 mn_recv_ba: Dumping corresponding BULE
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:3:0:0:0:20
lifetime = 420, delay = 1000
flags: IP6_MH_BU_ACK
Fri Feb 6 19:15:12 set_bule_lifetime: Set bule lifetime to 420 (s) and resend to bule->delay 420 (s)
Fri Feb 6 19:15:12 mn_recv_ba: Callback to mn_rr_check_entry after 420 seconds
Fri Feb 6 19:15:12 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:4:221:63ff:fe30:5e7b
CN address 2001:660:4701:3:0:0:0:20
lifetime = 420, delay = 420000
flags: IP6_MH_BU_ACK
Fri Feb 6 19:15:14 mpd_schedule_first_mps: schedule MPS in 2332744 s
Fri Feb 6 19:15:26 md_expire_router: expiring router fe80:0:0:0:20b:6aff:feb9:461b on iface ath0 (4)
Fri Feb 6 19:15:26 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:15:26 rrl_delete: 189
Fri Feb 6 19:15:26 md_change_default_router: add new router fe80:0:0:0:21e:58ff:fe31:c1c3 on interface ath0 (4)
Fri Feb 6 19:15:26 md_update_router_stats: add coa 2001:660:4701:2:221:63ff:fe30:5e7b on interface (4)
Fri Feb 6 19:15:26 md_expire_router: expiring router fe80:0:0:0:21e:58ff:fe31:c1c3 on iface ath0 (4)
Fri Feb 6 19:15:26 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:15:26 ndisc_send_unspec: sendmsg: Cannot assign requested address
Fri Feb 6 19:15:30 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:15:30 md_change_default_router: add new router fe80:0:0:0:21e:58ff:fe31:c1c3 on interface ath0 (4)
Fri Feb 6 19:15:30 md_update_router_stats: add coa 2001:660:4701:2:221:63ff:fe30:5e7b on interface (4)
Fri Feb 6 19:15:30 mn_move: 1751
Fri Feb 6 19:15:30 mn_move: in home net
Fri Feb 6 19:15:30 mv_hoa: move HoA 2001:660:4701:2:0:0:0:12/64 from iface 6 to 4
Fri Feb 6 19:15:30 mn_send_home_bu: 789
Fri Feb 6 19:15:30 mn_get_home_lifetime: BU lifetime 0 s
Fri Feb 6 19:15:30 mn_send_home_bu: Moved to home network
Fri Feb 6 19:15:30 mn_pol_ext_cleanup:
Fri Feb 6 19:15:30 mpd_cancel_mps: canceling MPS
Fri Feb 6 19:15:30 mn_ro_pol_del: Deleting default RO triggering policies for all Correspondent Nodes
Fri Feb 6 19:15:30 mn_send_home_bu: Bule for HA exists. Updating it.
Fri Feb 6 19:15:30 mh_send: sending MH type 5
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:30 mh_send: local CoA 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:30 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:2:0:0:0:1
lifetime = 0, delay = 1000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:30 tunnel_mod: modifying tunnel 6 end points with from 2001:660:4701:2:0:0:0:12 to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:31 __tunnel_mod: modified tunnel iface ip6tnl1 (6)from 2001:660:4701:2:0:0:0:12 to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:31 bu_resend: Bul resend [0x808b740] type 0
Fri Feb 6 19:15:31 mh_send: sending MH type 5
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:2:0:0:0:1
Fri Feb 6 19:15:31 mh_send: local CoA 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:31 bul_update_timer: Updating timer
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:2:0:0:0:1
lifetime = 0, delay = 2000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:32 mn_recv_ba: 1039
Fri Feb 6 19:15:32 mn_recv_ba: Got BA from 2001:660:4701:2:0:0:0:1 to home address 2001:660:4701:2:0:0:0:12 with coa 0:0:0:0:0:0:0:0 and status 0
Fri Feb 6 19:15:32 mn_recv_ba: Dumping corresponding BULE
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:2:0:0:0:1
lifetime = 0, delay = 2000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:32 mn_recv_ba: Got BA with incorrect sequence number 17898, the one sent in BU was 17899
Fri Feb 6 19:15:32 mn_recv_ba: 1039
Fri Feb 6 19:15:32 mn_recv_ba: Got BA from 2001:660:4701:2:0:0:0:1 to home address 2001:660:4701:2:0:0:0:12 with coa 0:0:0:0:0:0:0:0 and status 133
Fri Feb 6 19:15:32 mn_recv_ba: Dumping corresponding BULE
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:2:0:0:0:1
lifetime = 0, delay = 2000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:32 bul_delete: Deleting bule
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:2:0:0:0:1
lifetime = 0, delay = 2000
flags: IP6_MH_BU_HOME IP6_MH_BU_ACK
Fri Feb 6 19:15:33 mn_addr_do_dad: DAD succeeded!
Fri Feb 6 19:15:33 mn_addr_do_dad: address = 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:15:33 mn_move: 1751
Fri Feb 6 19:15:33 mn_move: in home net
Fri Feb 6 19:17:34 md_expire_router: expiring router fe80:0:0:0:21e:58ff:fe31:c1c3 on iface ath0 (4)
Fri Feb 6 19:17:34 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:17:34 md_change_default_router: add new router fe80:0:0:0:21e:58ff:fe31:c1c3 on interface ath0 (4)
Fri Feb 6 19:17:34 md_update_router_stats: add coa 2001:660:4701:2:221:63ff:fe30:5e7b on interface (4)
Fri Feb 6 19:18:42 xfrm_last_used: last use of binding was 1 seconds ago
Fri Feb 6 19:18:42 mh_send: sending MH type 1
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:18:42 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:18:42 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:18:42 rrl_get: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:18:42 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:18:42 mn_recv_hot: Still waiting for CoT, not sending BU
Fri Feb 6 19:20:11 md_expire_router: expiring router fe80:0:0:0:21e:58ff:fe31:c1c3 on iface ath0 (4)
Fri Feb 6 19:20:20 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:20:20 ndisc_send_unspec: sendmsg: Cannot assign requested address
Fri Feb 6 19:20:24 __md_discover_router: discover link on iface ath0 (4)
Fri Feb 6 19:20:24 md_change_default_router: add new router fe80:0:0:0:21e:58ff:fe31:c1c3 on interface ath0 (4)
Fri Feb 6 19:20:24 md_update_router_stats: add coa 2001:660:4701:2:221:63ff:fe30:5e7b on interface (4)
mip6d[5984]: terminated (SIGINT)
Fri Feb 6 19:21:11 terminate: got SIGINT, exiting
Fri Feb 6 19:21:11 flag_hoa: set HoA 2001:660:4701:2:0:0:0:12/64 iif 4 flags 0 preferred_time 604752 valid_time 2591952
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:21:11 mn_rr_cond_start_hot: Home keygen token valid, no HoTI
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:21:11 mh_send: sending MH type 5
from 2001:660:4701:2:0:0:0:12
to 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:21:11 mh_send: local CoA 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:21:11 mh_send: Adding bind auth data
Fri Feb 6 19:21:11 mh_send: Adding auth_data
Fri Feb 6 19:21:11 mh_send: sendmsg: Invalid argument
Fri Feb 6 19:21:11 mn_send_bu_msg: mh_send failed ret: -1
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:4:221:63ff:fe30:5e7b
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:21:11 rrl_delete_co_hoa: 212
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:2:0:0:0:12
Fri Feb 6 19:21:11 rrl_get: 2001:660:4701:3:0:0:0:20
Fri Feb 6 19:21:11 rrl_delete: 189
Fri Feb 6 19:21:11 bul_delete: Deleting bule
== BUL_ENTRY ==
Home address 2001:660:4701:2:0:0:0:12
Care-of address 2001:660:4701:2:0:0:0:12
CN address 2001:660:4701:3:0:0:0:20
lifetime = 0, delay = 420000
flags: IP6_MH_BU_ACK
Fri Feb 6 19:21:11 mn_block_rule_del: blackhole is not set.
Fri Feb 6 19:21:11 __tunnel_del: tunnel ip6tnl1 (6) from 2001:660:4701:2:0:0:0:12 to 2001:660:4701:2:0:0:0:1 user count decreased to 0
Fri Feb 6 19:21:11 __tunnel_del: tunnel deleted
Fri Feb 6 19:21:11 md_expire_router: expiring router fe80:0:0:0:21e:58ff:fe31:c1c3 on iface ath0 (4)
Fri Feb 6 19:21:11 xfrm_mn_cleanup: Deleting policies and states for MN
Fri Feb 6 19:21:11 xfrm_cn_cleanup: Deleting policies and states for CN
mip6d[5984]: MIPL Mobile IPv6 for Linux v2.0.2-umip-0.4 stopped (Mobile Node)
________________________________
Dari: "support-request at ml.nautilus6.org" <support-request at ml.nautilus6.org>
Kepada: support at ml.nautilus6.org
Terkirim: Senin, 2 Februari, 2009 09:17:13
Topik: Support Digest, Vol 40, Issue 2
Send Support mailing list submissions to
support at ml.nautilus6.org
To subscribe or unsubscribe via the World Wide Web, visit
http://ml.nautilus6.org/mailman/listinfo/support
or, via email, send a message with subject or body 'help' to
support-request at ml.nautilus6.org
You can reach the person managing the list at
support-owner at ml.nautilus6.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Support digest..."
Today's Topics:
1. Bls: Support Digest, Vol 40, Issue 1 (Brama Subhifajar)
2. Re: Bls: Support Digest, Vol 40, Issue 1 (Sebastien Decugis)
----------------------------------------------------------------------
Message: 1
Date: Mon, 2 Feb 2009 02:55:02 +0800 (SGT)
From: Brama Subhifajar <first_shaboo at yahoo.com>
Subject: [support] Bls: Support Digest, Vol 40, Issue 1
To: support at ml.nautilus6.org
Message-ID: <87879.76914.qm at web76309.mail.sg1.yahoo.com>
Content-Type: text/plain; charset="utf-8"
hello,
thank's to Mr. Sebastien Decugis for the answer.
but I still have a problem, when I am change network from Home Network to Foreign Network with IPSec, Binding Update from Mobile Node to Home Agent was sent, but the Home Agent not make a respon, so the Mobile Node can not registered the new CoA to Home Agent. then I try to ping Corresponden Node the messege is "operation is not permitted". then when I try again without IPSec, all node run with no error.
I am using sa.conf for IPSec:
##-------------------------------------------------------------
## IPsec MN -> HA, CN (BU) and HA, CN -> MN (BA) Transport Mode
##-------------------------------------------------------------
add 2001:660:4701:5::12 #mobile node
2001:660:4701:5::1 #home agent
esp 0001
-m transport
-E null
-A null;
add 2001:660:4701:5::1
2001:660:4701:5::12
esp 0002
-m transport
-E null
-A null;
##-------------------------------------------------------
## IPsec MN -> HA (HoTI) and HA -> MN (HoT) Tunnel Mode
##-------------------------------------------------------
add 2001:660:4701:5::12
2001:660:4701:5::1
esp 0016
-m tunnel
-E null
-A null;
add 2001:660:4701:5::1
2001:660:4701:5::12
esp 0017
-m tunnel
-E null
-A null;
I active with:
setkey -FP
setkey -F
setkey -f /usr/local/etc/sa.conf
is there any wrong?
________________________________
Dari: "support-request at ml.nautilus6.org" <support-request at ml.nautilus6.org>
Kepada: support at ml.nautilus6.org
Terkirim: Minggu, 1 Februari, 2009 09:28:27
Topik: Support Digest, Vol 40, Issue 1
Send Support mailing list submissions to
support at ml.nautilus6.org
To subscribe or unsubscribe via the World Wide Web, visit
http://ml.nautilus6.org/mailman/listinfo/support
or, via email, send a message with subject or body 'help' to
support-request at ml.nautilus6.org
You can reach the person managing the list at
support-owner at ml.nautilus6.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Support digest..."
Today's Topics:
1. IPSec on Homeguy (Brama Subhifajar)
2. Re: IPSec on Homeguy (Sebastien Decugis)
----------------------------------------------------------------------
Message: 1
Date: Sat, 31 Jan 2009 22:04:20 +0800 (SGT)
From: Brama Subhifajar <first_shaboo at yahoo.com>
Subject: [support] IPSec on Homeguy
To: support at ml.nautilus6.org
Message-ID: <179050.88309.qm at web76308.mail.sg1.yahoo.com>
Content-Type: text/plain; charset="utf-8"
hello,
I try to implementation Mobile IPv6 and I am using homeguy for all node on my network.
My implementation using IPsec, and I have trouble:
when I try to run mip6d I have XFRM error report both on Mobile Node and Home Agent, then I try check on kernel ( security option --> XFRM (IPSec)) I found the option is not marked. so I mark (*) then I recompie the kernel like the instruction on https://help.ubuntu.com/community/Kernel/Compile#AltBuildMethod
I was trying all the tutorial, all process when compiling kernel was sucessed with no error. I reboot computer and login at new kernel. the problem, My implementation is using RADVD for router advertisement when I start error messege is apparmor module is failed to load.. I check again the module,(/lib/module/) I found there is no folder ubuntu and on (/sys/module) there is no folder apparmor.
I am using homeguy kernel 2.6.22-14-mip6 and repository from http://software.nautilus6.org/packages/ubuntu gutsy/
http://debian.nctu.edu.tw/ubuntu gutsy/.
I think I was wrong on compiling kernel..
can somebody help me to make correction from what I did.. or any suggestion how to implementation mobile IPv6 using IPSec..
sorry if my english is bad.
thank's before
Bersenang-senang di Yahoo! Messenger dengan semua teman. Tambahkan mereka dari email atau jaringan sosial Anda sekarang! http://id.messenger.yahoo.com/invite/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ml.nautilus6.org/pipermail/support/attachments/20090131/a62f4f96/attachment.html
------------------------------
Message: 2
Date: Sun, 01 Feb 2009 00:56:36 +0900
From: Sebastien Decugis <sdecugis at hongo.wide.ad.jp>
Subject: Re: [support] IPSec on Homeguy
To: Support ML <support at ml.nautilus6.org>
Message-ID: <498474B4.5070604 at hongo.wide.ad.jp>
Content-Type: text/plain; charset=UTF-8
Hello,
The homeguy live CD was tested successfully with IPsec protection of
Mobile IPv6 signaling and payload data (both static and dynamic keying).
If you are using it you don't need to recompile the kernel or other
components, since they were patched to work smoothly together. You can
even use the HAiku software to generate the configuration for your
static keying for you.
If you want to use newer versions, you may need to port some of the
patches. You can find a tutorial (almost 1 year ago, situation probably
changed) on [1] and probably more up-to-date information on [2].
Hope it helps...
Sebastien.
[1] http://www.nautilus6.org/doc/dk-howto/Howto_dynamic_keying.html
[2] http://natisbad.org/MIPv6/index.html
Brama Subhifajar a écrit :
> hello,
>
> I try to implementation Mobile IPv6 and I am using homeguy for all
> node on my network.
> My implementation using IPsec, and I have trouble:
>
> when I try to run mip6d I have XFRM error report both on Mobile Node
> and Home Agent, then I try check on kernel ( security option --> XFRM
> (IPSec)) I found the option is not marked. so I mark (*) then I recompie
> the kernel like the instruction on
> https://help.ubuntu.com/community/Kernel/Compile#AltBuildMethod
> I was trying all the tutorial, all process when compiling kernel was
> sucessed with no error. I reboot computer and login at new kernel. the
> problem, My implementation is using RADVD for router advertisement when
> I start error messege is apparmor module is failed to load.. I check
> again the module,(/lib/module/) I found there is no folder ubuntu
> and on (/sys/module) there is no folder apparmor.
>
> I am using homeguy kernel 2.6.22-14-mip6 and repository from
> http://software.nautilus6.org/packages/ubuntu gutsy/
> http://debian.nctu.edu.tw/ubuntu gutsy/.
>
> I think I was wrong on compiling kernel..
>
> can somebody help me to make correction from what I did.. or any
> suggestion how to implementation mobile IPv6 using IPSec..
>
>
>
>
> sorry if my english is bad.
>
> thank's before
>
> ------------------------------------------------------------------------
> Mencari semua teman di Yahoo! Messenger?
> <http://sg.rd.yahoo.com/id/messenger/trueswitch/mailtagline/*http://id.messenger.yahoo.com/invite/>
> Undang teman dari Hotmail, Gmail ke Yahoo! Messenger dengan mudah sekarang!
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Support mailing list
> Support at ml.nautilus6.org
> http://ml.nautilus6.org/mailman/listinfo/support
------------------------------
_______________________________________________
Support mailing list
Support at ml.nautilus6.org
http://ml.nautilus6.org/mailman/listinfo/support
End of Support Digest, Vol 40, Issue 1
**************************************
Apakah demonstrasi & turun ke jalan itu hal yang wajar? Temukan jawabannya di Yahoo! Answers! http://id.answers.yahoo.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ml.nautilus6.org/pipermail/support/attachments/20090202/20ea54d2/attachment.html
------------------------------
Message: 2
Date: Mon, 02 Feb 2009 11:16:24 +0900
From: Sebastien Decugis <sdecugis at hongo.wide.ad.jp>
Subject: Re: [support] Bls: Support Digest, Vol 40, Issue 1
To: Support ML <support at ml.nautilus6.org>
Message-ID: <49865778.9030603 at hongo.wide.ad.jp>
Content-Type: text/plain; charset=UTF-8
Hi,
Your SA looks fine (although I never actually tried the NULL algorithm,
but it should be OK).
Since the BU is sent, your MN configuration should be fine.
What happens on the HA? Can you see the received BU in the HA mip6d
logs? Or is it dropped at IPsec level? Do you have the corresponding SA
entries on your HA?
Sebastien.
Brama Subhifajar a écrit :
> hello,
>
> thank's to Mr. Sebastien Decugis for the answer.
>
> but I still have a problem, when I am change network from Home Network
> to Foreign Network with IPSec, Binding Update from Mobile Node to Home
> Agent was sent, but the Home Agent not make a respon, so the Mobile
> Node can not registered the new CoA to Home Agent. then I try to ping
> Corresponden Node the messege is "operation is not permitted". then
> when I try again without IPSec, all node run with no error.
>
> I am using sa.conf for IPSec:
>
> ##-------------------------------------------------------------
> ## IPsec MN -> HA, CN (BU) and HA, CN -> MN (BA) Transport Mode
> ##-------------------------------------------------------------
> add 2001:660:4701:5::12 #mobile node
> 2001:660:4701:5::1 #home agent
> esp 0001
> -m transport
> -E null
> -A null;
> add 2001:660:4701:5::1
> 2001:660:4701:5::12
> esp 0002
> -m transport
> -E null
> -A null;
> ##-------------------------------------------------------
> ## IPsec MN -> HA (HoTI) and HA -> MN (HoT) Tunnel Mode
> ##-------------------------------------------------------
> add 2001:660:4701:5::12
> 2001:660:4701:5::1
> esp 0016
> -m tunnel
> -E null
> -A null;
> add 2001:660:4701:5::1
> 2001:660:4701:5::12
> esp 0017
> -m tunnel
> -E null
> -A null;
>
> I active with:
> setkey -FP
> setkey -F
> setkey -f /usr/local/etc/sa.conf
>
> is there any wrong?
>
>
>
>
>
> ------------------------------------------------------------------------
> *Dari:* "support-request at ml.nautilus6.org"
> <support-request at ml.nautilus6.org>
> *Kepada:* support at ml.nautilus6.org
> *Terkirim:* Minggu, 1 Februari, 2009 09:28:27
> *Topik:* Support Digest, Vol 40, Issue 1
>
> Send Support mailing list submissions to
> support at ml.nautilus6.org <mailto:support at ml.nautilus6.org>
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://ml.nautilus6.org/mailman/listinfo/support
> or, via email, send a message with subject or body 'help' to
> support-request at ml.nautilus6.org
> <mailto:support-request at ml.nautilus6.org>
>
> You can reach the person managing the list at
> support-owner at ml.nautilus6.org <mailto:support-owner at ml.nautilus6.org>
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Support digest..."
>
>
> Today's Topics:
>
> 1. IPSec on Homeguy (Brama Subhifajar)
> 2. Re: IPSec on Homeguy (Sebastien Decugis)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 31 Jan 2009 22:04:20 +0800 (SGT)
> From: Brama Subhifajar <first_shaboo at yahoo.com
> <mailto:first_shaboo at yahoo.com>>
> Subject: [support] IPSec on Homeguy
> To: support at ml.nautilus6.org <mailto:support at ml.nautilus6.org>
> Message-ID: <179050.88309.qm at web76308.mail.sg1.yahoo.com
> <mailto:179050.88309.qm at web76308.mail.sg1.yahoo.com>>
> Content-Type: text/plain; charset="utf-8"
>
> hello,
>
> I try to implementation Mobile IPv6 and I am using homeguy for
> all node on my network.
> My implementation using IPsec, and I have trouble:
>
> when I try to run mip6d I have XFRM error report both on Mobile Node
> and Home Agent, then I try check on kernel ( security option -->
> XFRM (IPSec)) I found the option is not marked. so I mark (*) then I
> recompie the kernel like the instruction on
> https://help.ubuntu.com/community/Kernel/Compile#AltBuildMethod
> I was trying all the tutorial, all process when compiling kernel was
> sucessed with no error. I reboot computer and login at new kernel. the
> problem, My implementation is using RADVD for router advertisement
> when I start error messege is apparmor module is failed to load.. I
> check again the module,(/lib/module/) I found there is no folder
> ubuntu and on (/sys/module) there is no folder apparmor.
>
> I am using homeguy kernel 2.6.22-14-mip6 and repository from
> http://software.nautilus6.org/packages/ubuntu gutsy/
> http://debian.nctu.edu.tw/ubuntu gutsy/.
>
> I think I was wrong on compiling kernel..
>
> can somebody help me to make correction from what I did.. or any
> suggestion how to implementation mobile IPv6 using IPSec..
>
>
>
>
> sorry if my english is bad.
>
> thank's before
>
>
>
> Bersenang-senang di Yahoo! Messenger dengan semua teman.
> Tambahkan mereka dari email atau jaringan sosial Anda sekarang!
> http://id.messenger.yahoo.com/invite/
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://ml.nautilus6.org/pipermail/support/attachments/20090131/a62f4f96/attachment.html
>
> ------------------------------
>
> Message: 2
> Date: Sun, 01 Feb 2009 00:56:36 +0900
> From: Sebastien Decugis <sdecugis at hongo.wide.ad.jp
> <mailto:sdecugis at hongo.wide.ad.jp>>
> Subject: Re: [support] IPSec on Homeguy
> To: Support ML <support at ml.nautilus6.org
> <mailto:support at ml.nautilus6.org>>
> Message-ID: <498474B4.5070604 at hongo.wide.ad.jp
> <mailto:498474B4.5070604 at hongo.wide.ad.jp>>
> Content-Type: text/plain; charset=UTF-8
>
> Hello,
>
> The homeguy live CD was tested successfully with IPsec protection of
> Mobile IPv6 signaling and payload data (both static and dynamic keying).
> If you are using it you don't need to recompile the kernel or other
> components, since they were patched to work smoothly together. You can
> even use the HAiku software to generate the configuration for your
> static keying for you.
>
> If you want to use newer versions, you may need to port some of the
> patches. You can find a tutorial (almost 1 year ago, situation probably
> changed) on [1] and probably more up-to-date information on [2].
>
> Hope it helps...
> Sebastien.
>
> [1] http://www.nautilus6.org/doc/dk-howto/Howto_dynamic_keying.html
> [2] http://natisbad.org/MIPv6/index.html
>
>
> Brama Subhifajar a écrit :
> > hello,
> >
> > I try to implementation Mobile IPv6 and I am using homeguy for all
> > node on my network.
> > My implementation using IPsec, and I have trouble:
> >
> > when I try to run mip6d I have XFRM error report both on Mobile Node
> > and Home Agent, then I try check on kernel ( security option --> XFRM
> > (IPSec)) I found the option is not marked. so I mark (*) then I recompie
> > the kernel like the instruction on
> > https://help.ubuntu.com/community/Kernel/Compile#AltBuildMethod
> > I was trying all the tutorial, all process when compiling kernel was
> > sucessed with no error. I reboot computer and login at new kernel. the
> > problem, My implementation is using RADVD for router advertisement when
> > I start error messege is apparmor module is failed to load.. I check
> > again the module,(/lib/module/) I found there is no folder ubuntu
> > and on (/sys/module) there is no folder apparmor.
> >
> > I am using homeguy kernel 2.6.22-14-mip6 and repository from
> > http://software.nautilus6.org/packages/ubuntu gutsy/
> > http://debian.nctu.edu.tw/ubuntu gutsy/.
> >
> > I think I was wrong on compiling kernel..
> >
> > can somebody help me to make correction from what I did.. or any
> > suggestion how to implementation mobile IPv6 using IPSec..
> >
> >
> >
> >
> > sorry if my english is bad.
> >
> > thank's before
> >
> > ------------------------------------------------------------------------
> > Mencari semua teman di Yahoo! Messenger?
> >
> <http://sg.rd.yahoo.com/id/messenger/trueswitch/mailtagline/*http://id.messenger.yahoo.com/invite/>
> > Undang teman dari Hotmail, Gmail ke Yahoo! Messenger dengan mudah
> sekarang!
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Support mailing list
> > Support at ml.nautilus6.org <mailto:Support at ml.nautilus6.org>
> > http://ml.nautilus6.org/mailman/listinfo/support
>
>
> ------------------------------
>
> _______________________________________________
> Support mailing list
> Support at ml.nautilus6.org <mailto:Support at ml.nautilus6.org>
> http://ml.nautilus6.org/mailman/listinfo/support
>
>
> End of Support Digest, Vol 40, Issue 1
> **************************************
>
> ------------------------------------------------------------------------
> Menambah banyak teman sangatlah mudah dan cepat.
> <http://sg.rd.yahoo.com/id/messenger/trueswitch/mailtagline/*http://id.messenger.yahoo.com/invite/>
> Undang teman dari Hotmail, Gmail ke Yahoo! Messenger sekarang!
> ------------------------------------------------------------------------
>
> _______________________________________________
> Support mailing list
> Support at ml.nautilus6.org
> http://ml.nautilus6.org/mailman/listinfo/support
>
------------------------------
_______________________________________________
Support mailing list
Support at ml.nautilus6.org
http://ml.nautilus6.org/mailman/listinfo/support
End of Support Digest, Vol 40, Issue 2
**************************************
Terhubung langsung dengan banyak teman di blog dan situs pribadi Anda? Buat Pingbox terbaru Anda sekarang! http://id.messenger.yahoo.com/pingbox/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ml.nautilus6.org/pipermail/support/attachments/20090206/a90bc13a/attachment-0002.htm
More information about the Support
mailing list