[support] Re: udp encapsulation of ipv4 data traffic in ipv4 FL

[manish Jamwal]

Hi All

Facing problem in adding the xfrm state for udp encapsulation of ipv4 data
traffic in ipv4 FL, when NAT is detected.

Details:
Xfrm kernel code is failing to add the xfrm state for udp encapsulation of
IPv4 data packets, because there       is already state with same selectors
for BU and ipv6 data traffic in IPv4 FL.

The state added for udp encapsulation of ipv4 data traffic is:
        src v4CoA   dst v4HA
        proto 166 spi 0x00000000 reqid 0 mode tunnel
        replay-window 0
        encap (not implemented yet!)
        sel  src  v4HoA   dst v4-any

Xfrm state already exist for BU and ipv6 data traffic is:
        src  v4CoA   dst v4HA
        proto 166 spi 0x00000000 reqid 0 mode tunnel
        replay-window 0
        encap (not implemented yet!)
        sel  src v6HoA   dst v6-any

Please provide some pointer, how to overcome it..............

Regards
Manish Jamwal





On Thu, Mar 19, 2009 at 1:34 PM, manish Jamwal <manish.jamwal at gmail.com>wrote:

> Hi Nassim
>
> Thanks for your previous pointers for udp encapsulation of BA and ipv6 data
> traffic. Modified the xfrm policies to add the support.
>
>  Looked into udp encapsulation code (net/ipv4/xfrm4_udp_encap.c) in
> kernel. It seems that there is support for handling of ipv4 data traffic
> encapsulated in UDP but the policy/state should match for outgoing/incoming
> packets in MN/HA. Otherwise the packet is dropped.
>
> Need some pointer to proceed further on udp encapsulation of ipv4 data
> traffic.
> Question:
> a. What should be xfrm policy/state to udp encapsulate ipv4 data traffic on
> MN and HA side?
> b. Do we have support for udp encapsulation of ipv4 data traffic in current
> mipv6 code?
>
> Regards
> Manish Jamwal
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ml.nautilus6.org/pipermail/support/attachments/20090319/fcf68898/attachment-0001.htm