[support] mipv6 error

[Sebastien Decugis]

Hi,

The following lines seem to show the problem:

> iked log in HA:
> 2009-05-17 17:06:20 [DEBUG]:
> ikev2_payload.c:137:ikev2_check_payloads(): offset 0x19c type 44
> (TS_I) len 48
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:286:ikev2_print_ts(): TS
> Payload: type=TS_IPV6_ADDR_RANGE proto=135 length=40 start_port=1536
> end_port=1536
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:291:ikev2_print_ts(): TS
> Starting Address=3ffe:0:0:2::
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:293:ikev2_print_ts(): TS
> Ending Address=3ffe::2:ffff:ffff:ffff:ffff

> 2009-05-17 17:06:20 [DEBUG]:
> ikev2_payload.c:137:ikev2_check_payloads(): offset 0x1cc type 45
> (TS_R) len 48
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:286:ikev2_print_ts(): TS
> Payload: type=TS_IPV6_ADDR_RANGE proto=135 length=40 start_port=1280
> end_port=1280
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:291:ikev2_print_ts(): TS
> Starting Address=3ffe:0:0:2::1
> 2009-05-17 17:06:20 [DEBUG]: ikev2_payload.c:293:ikev2_print_ts(): TS
> Ending Address=3ffe:0:0:2::1

> 2009-05-17 17:06:20 [DEBUG]:
> ike_conf.c:2152:ike_conf_find_ikev2sel_by_ts():
> ike_conf_find_ikev2sel_by_ts
> 2009-05-17 17:06:20 [DEBUG]:
> ike_conf.c:2081:ikev2_dump_traffic_selectors(): remote
> 2009-05-17 17:06:20 [DEBUG]:
> ike_conf.c:2081:ikev2_dump_traffic_selectors(): local
> 2009-05-17 17:06:20 [PROTO_ERR]:
> ikev2_child.c:644:ikev2_create_child_responder(): 1:3ffe:0:0:2::1[500]
> - 3ffe::3:215:ff:fe4d:7046[500]:(nil):ts unacceptable
> 2009-05-17 17:06:20 [DEBUG]:
> ikev2_child.c:139:ikev2_child_state_set(): child_sa 0x80f0070 state
> IDLING -> EXPIRED

>
> **************************************************************************************
>
> iked log in MN :
>
>
> 2009-05-17 17:19:07 [DEBUG]:
> ikev2.c:2698:initiator_ike_sa_auth_recv0(): received notify type
> TS_UNACCEPTABLE
> 2009-05-17 17:19:07 [DEBUG]:
> ikev2_child.c:139:ikev2_child_state_set(): child_sa 0x80f20e8 state
> WAIT_RESPONSE -> EXPIRED

There seems to be a problem with the traffic selectors. What is sent by
the MN looks fine to me, so the problem is probably on the HA. Can you
send the iked and mip6d configuration files of your HA?

Thank you,
Sebastien.