[support] Dynamic keyring with racoon2 operation

[Arnaud Ebalard]

Brama Subhifajar <first_shaboo at yahoo.com> writes:

> I try to forge packets with Scapy6  with Sebastien Decugis way, here
> is the log on HA without IPSec : 
>
> Mon Jul  6 19:05:44 mh_bu_parse: Binding Update Received
> Mon Jul  6 19:05:45 ndisc_do_dad: Dad success
> Mon Jul  6 19:05:45 __tunnel_add: created tunnel ip6tnl1 (9) from 2001:db8:0:2:0:0:0:1 to 2001:db8:0:4:221:63ff:fe30:5e7b user count 1
> Mon Jul  6 19:05:45 MN (2001:db8:0:2:0:0:0:1) does not support IKE session movement.
> Mon Jul  6 19:05:45 mh_send_ba: status 0
> Mon Jul  6 19:05:45 mh_send: sending MH type 6
> from 2001:db8:0:2:0:0:0:1
> to 2001:db8:0:2:0:0:0:2
> Mon Jul  6 19:05:45 mh_send: remote CoA 2001:db8:0:4:221:63ff:fe30:5e7b
> Mon Jul  6 19:06:17 mh_bu_parse: Binding Update Received
> Mon Jul  6 19:06:17 tunnel_mod: modifying tunnel 9 end points with from 2001:db8:0:2:0:0:0:1 to 2001:db8:0:2:0:0:0:2
> Mon Jul  6 19:06:17 __tunnel_mod: modified tunnel iface ip6tnl1 (9)from 2001:db8:0:2:0:0:0:1 to 2001:db8:0:2:0:0:0:2
> Mon Jul  6 19:06:17 __tunnel_del: tunnel ip6tnl1 (9) from 2001:db8:0:2:0:0:0:1 to 2001:db8:0:2:0:0:0:2 user count decreased to 0
> Mon Jul  6 19:06:17 __tunnel_del: tunnel deleted
> Mon Jul  6 19:06:17 MN (2001:db8:0:2:0:0:0:1) does not support IKE session movement.
> Mon Jul  6 19:06:17 mh_send_ba: status 0
> Mon Jul  6 19:06:17 mh_send: sending MH type 6
> from 2001:db8:0:2:0:0:0:1
> to 2001:db8:0:2:0:0:0:2
> ==>Mon Jul  6 19:12:37 mh_bu_parse: Binding Update Received
> ==>Mon Jul  6 19:12:37 mh_send_ba: status 133
> ==>Mon Jul  6 19:12:38 mh_send: sending MH type 6
> ==>from 2001:db8:0:2:0:0:0:1
> ==>to 2001:db8:0:2:0:0:0:2
> ==>Mon Jul  6 19:12:38 mh_send: remote CoA 2001:db8:0:2:221:63ff:fe30:5e7
>
> ==> : is binding update with scapy6.

BTW, if you are playing with Scapy and UMIP, you may be interested by
that:

http://tools.ietf.org/html/draft-ebalard-mext-hld-security-00

Cheers,

a+