[support] ipsec through mn-mn and mn-cn

[Arnaud Ebalard]

Hi,

lidq786 <lidq786 at 163.com> writes:

> hi,guys!who have tried or done the ipsec through mn-mn and mn-cn
> cooperated with umip mip6d?

At the moment, it is not even possible to have a working unprotected RO
between a MN and CN while using tunnel payload protection via IPsec
between the MN and the HA. Furthermore, UMIP does not provide a way to
express IPsec policies between MN and CN yet.

I have started working on the implementation of IPsec RO [1] for UMIP
but this is a work in progress that I do on my (limited) spare time,
i.e. no expected release date yet.

Cheers,

a+

[1]: http://tools.ietf.org/html/draft-ebalard-mext-ipsec-ro-01