<div>Hi</div>
<div>Check this one, hope this opens :)</div>
<div><a href="http://ols.fedoraproject.org/OLS/Reprints-2004/Reprint-Miyazawa-OLS2004.pdf">http://ols.fedoraproject.org/OLS/Reprints-2004/Reprint-Miyazawa-OLS2004.pdf</a></div>
<div> </div>
<div>Regards</div>
<div>Manish Jamwal<br><br></div>
<div class="gmail_quote">On Wed, Mar 25, 2009 at 1:31 PM, Mattias Blomqvist <span dir="ltr"><<a href="mailto:mattias.blomqvist@gmail.com">mattias.blomqvist@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hi.<br><br>Nothing about xfrm in that pdf... Maybe you sent the wrong link?<br><font color="#888888"><br>/Mattias<br>
</font>
<div>
<div></div>
<div class="h5"><br>On Tue, Mar 24, 2009 at 6:22 PM, manish Jamwal <<a href="mailto:manish.jamwal@gmail.com">manish.jamwal@gmail.com</a>> wrote:<br>> Hi<br>><br>> The xfrm policy for BU is set in kernel from mip6d code. You can see the<br>
> policy by below command<br>> # ip xfrm policy show<br>> src ::/0 dst ::/0 proto 135 sport 5<br>> dir in priority 9<br>> tmpl src :: dst ::<br>
> proto ipv6-opts spi 0x00000000 reqid 0 mode 2<br>> level use<br>><br>> Read this pdf, it will help u understand xfrm architecture better.<br>><br>> <a href="http://ols.fedoraproject.org/OLS/Reprints-2006/schopp-reprint.pdf" target="_blank">http://ols.fedoraproject.org/OLS/Reprints-2006/schopp-reprint.pdf</a><br>
><br>> Regards<br>> Manish Jamwal<br>><br>> On Tue, Mar 24, 2009 at 10:01 PM, Mattias Blomqvist<br>> <<a href="mailto:mattias.blomqvist@gmail.com">mattias.blomqvist@gmail.com</a>> wrote:<br>>><br>
>> Hi<br>>><br>>> I've done some more research.<br>>><br>>> I can't get it to work with either of the mip6d from <a href="http://nautilus6.org/" target="_blank">nautilus6.org</a> or<br>
>> from <a href="http://natisbad.org/" target="_blank">natisbad.org</a> on either debian 4.0 or debian 5.0 with a variety of<br>>> kernels. I'm currently on debian 5.0 and kernel 2.6.29. The kernel is<br>>> before compiling checked with set_mip6_ipsec_fw_kernel_options.sh from<br>
>> <a href="http://natisbad.org/" target="_blank">natisbad.org</a> to make sure all the correct options are set.<br>>> Kernel 2.6.29 doesn't send destination unreachable as a patched 2.6.24<br>>> did.<br>
>><br>>> I'm currently investigating the xfrm setup and I have a question. A HA<br>>> does both xfrm_ha_init() and xfrm_cn_init(). xfrm_ha_init() only sets<br>>> up ipsec which I have turned off. xfrm_cn_init() says in its comments:<br>
>> /* Create policy for all BUs with home flag NOT set to<br>>> use home address option */<br>>><br>>> So where is the xfrm policy for BUs with home flag set ? Or isn't that<br>
>> policy needed for the HA?<br>>><br>>> Just trying to understand things...<br>>><br>>> Would it be a good or bad idea to cross-post this to usagi-users?<br>>><br>>> BR,<br>>> Mattias Blomqvist<br>
>><br>>> On Mon, Mar 23, 2009 at 11:44 PM, Romain KUNTZ <<a href="mailto:kuntz@lsiit.u-strasbg.fr">kuntz@lsiit.u-strasbg.fr</a>><br>>> wrote:<br>>> > Hi Mattias,<br>>> ><br>>> > On 2009/03/23, at 15:02, Mattias Blomqvist wrote:<br>
>> >> libc6 is standard debian 5.0 which is 2.7-18 (afaik).<br>>> >> I also came to think of libc problems so I recompiled from the source<br>>> >> package from nautilus6 but with exactly the same result.<br>
>> >><br>>> >> I've tracked the issue down to mh_recv() in mh_listen() in mh.c never<br>>> >> returning any data. This in turn is because recvmsg() in mh_recv()<br>>> >> never returns any data.<br>
>> >> This seems to be in line with the destination unreachable being sent.<br>>> >> It seems like the kernel or some lib doesn't think that any process is<br>>> >> interested in the BU.<br>
>> ><br>>> > I don't have any clue so far, but if you happen to find the cause of<br>>> > the problem and/or a solution, please advertise it on this list and<br>>> > I'll add an entry in the howto FAQ.<br>
>> ><br>>> > Cheers,<br>>> > romain<br>>> ><br>>> ><br>>> >> On Mon, Mar 23, 2009 at 2:17 PM, Romain KUNTZ <<a href="mailto:kuntz@lsiit.u-strasbg.fr">kuntz@lsiit.u-strasbg.fr</a><br>
>> >> > wrote:<br>>> >>> Seems also OK to me. That is odd, it's the first time I hear about<br>>> >>> such<br>>> >>> issue.<br>>> >>> I've got the sane configuration here (2.6.24-1 kernel & mip6d from<br>
>> >>> nautilus6) running fine.<br>>> >>><br>>> >>> Which libc6 version are you using? Mine is 2.7-18.<br>>> >>><br>>> >>> Cheers,<br>>> >>> romain<br>
>> >>><br>>> >>> On 2009/03/23, at 13:18, Mattias Blomqvist wrote:<br>>> >>><br>>> >>>> Hi,<br>>> >>>><br>>> >>>> Good question. Missed that one. It says the following with mip6d and<br>
>> >>>> radvd running:<br>>> >>>><br>>> >>>> HA:~# netstat -6 -a<br>>> >>>> Active Internet connections (servers and established)<br>>> >>>> Proto Recv-Q Send-Q Local Address Foreign<br>
>> >>>> Address State<br>>> >>>> tcp6 0 0 localhost:7777<br>>> >>>> [::]:* LISTEN<br>>> >>>> tcp6 0 0 [::]:ssh<br>
>> >>>> [::]:* LISTEN<br>>> >>>> tcp6 0 0 localhost:6010<br>>> >>>> [::]:* LISTEN<br>>> >>>> raw6 0 0 [::]:ipv6-icmp<br>
>> >>>> [::]:* 7<br>>> >>>> raw6 0 0 [::]:ipv6-icmp<br>>> >>>> [::]:* 7<br>>> >>>> raw6 0 0 [::]:135<br>
>> >>>> [::]:* 7<br>>> >>>><br>>> >>>> After stopping mip6d and radvd it says:<br>>> >>>> HA:~# netstat -6 -a<br>>> >>>> Active Internet connections (servers and established)<br>
>> >>>> Proto Recv-Q Send-Q Local Address Foreign<br>>> >>>> Address State<br>>> >>>> tcp6 0 0 [::]:ssh<br>>> >>>> [::]:* LISTEN<br>
>> >>>> tcp6 0 0 localhost:6010<br>>> >>>> [::]:* LISTEN<br>>> >>>><br>>> >>>><br>>> >>>> Looks ok to me. Or?<br>
>> >>>><br>>> >>>> BR,<br>>> >>>> Mattias<br>>> >>>><br>>> >>>> On Mon, Mar 23, 2009 at 1:06 PM, Romain KUNTZ<br>>> >>>> <<a href="mailto:kuntz@lsiit.u-strasbg.fr">kuntz@lsiit.u-strasbg.fr</a><br>
>> >>>> ><br>>> >>>> wrote:<br>>> >>>>><br>>> >>>>> Hi,<br>>> >>>>><br>>> >>>>> What does netstat tells you?<br>
>> >>>>><br>>> >>>>> Cheers,<br>>> >>>>> romain<br>>> >>>>><br>>> >>>>> On 2009/03/23, at 11:26, Mattias Blomqvist wrote:<br>
>> >>>>><br>>> >>>>>> Hello<br>>> >>>>>><br>>> >>>>>> I'm getting destination unreachable icmp errors with code set to<br>>> >>>>>> "port<br>
>> >>>>>> unreachable" (4) from the HA with mip6d running (and without of<br>>> >>>>>> course).<br>>> >>>>>> This is under Debian 5.0 but with the kernel and mip6d from<br>
>> >>>>>> <a href="http://nautilus6.org/" target="_blank">nautilus6.org</a>.<br>>> >>>>>><br>>> >>>>>> HA:~# uname -a<br>>> >>>>>> Linux HA 2.6.24-1-mip6-686 #1 SMP Tue Feb 26 03:20:31 UTC 2008<br>
>> >>>>>> i686<br>>> >>>>>> GNU/Linux<br>>> >>>>>><br>>> >>>>>> If I run mip6d in the foreground it says the following:<br>>> >>>>>> HA:~# mip6d<br>
>> >>>>>> mip6d[2497]: MIPL Mobile IPv6 for Linux v2.0.2-umip-0.4 started<br>>> >>>>>> (Home<br>>> >>>>>> Agent)<br>>> >>>>>> Mon Mar 23 11:41:16 main: MIPL Mobile IPv6 for Linux started in<br>
>> >>>>>> debug<br>>> >>>>>> mode, not detaching from terminal<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: config_file = /etc/mip6d.conf<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: vt_hostname = localhost<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: vt_service = 7777<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: mip6_entity = 2<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: debug_level = 10<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: debug_log_file = stderr<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: PolicyModulePath = [internal]<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: DefaultBindingAclPolicy = 0<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: NonVolatileBindingCache = disabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: KeyMngMobCapability = disabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: UseMnHaIPsec = disabled<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnMaxHaBindingLife = 262140<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnMaxCnBindingLife = 420<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnRouterProbes = 0<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnRouterProbeTimeout = 0.000000<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: InitialBindackTimeoutFirstReg =<br>>> >>>>>> 1.500000<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: InitialBindackTimeoutReReg =<br>>> >>>>>> 1.000000<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: UseCnBuAck = disabled<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: DoRouteOptimizationMN = enabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnUseAllInterfaces = disabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MnDiscardHaParamProb = disabled<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: SendMobPfxSols = enabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: OptimisticHandoff = disabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MobRtrUseExplicitMode = enabled<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: SendMobPfxAdvs = enabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: SendUnsolMobPfxAdvs = enabled<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: MaxMobPfxAdvInterval = 86400<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: MinMobPfxAdvInterval = 600<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: HaMaxBindingLife = 262140<br>>> >>>>>> Mon Mar 23 11:41:16 conf_show: HaAcceptMobRtr = disabled<br>
>> >>>>>> Mon Mar 23 11:41:16 conf_show: DoRouteOptimizationCN = disabled<br>>> >>>>>> Mon Mar 23 11:41:16 xfrm_cn_init: Adding policies and states for<br>>> >>>>>> CN<br>
>> >>>>>> Mon Mar 23 11:41:16 xfrm_ha_init: Adding policies and states for<br>>> >>>>>> HA<br>>> >>>>>> Mon Mar 23 11:41:16 ha_if_addr_setup: Joined anycast group<br>
>> >>>>>> 2a03:a0a:ffff:ffff:ffff:ffff:ffff:fffe on iface 3<br>>> >>>>>><br>>> >>>>>><br>>> >>>>>> iface 3 is correct since:<br>
>> >>>>>> HA:~# ip link<br>>> >>>>>> ........<br>>> >>>>>> 3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc<br>>> >>>>>> pfifo_fast<br>
>> >>>>>> state UNKNOWN qlen 1000<br>>> >>>>>> link/ether 08:00:27:99:49:45 brd ff:ff:ff:ff:ff:ff<br>>> >>>>>><br>>> >>>>>> tcpdump on HA gives:<br>
>> >>>>>> HA:~# tcpdump -vvv -i eth0 -s 200 host yyyy:yyyy::1<br>>> >>>>>> tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture<br>>> >>>>>> size<br>
>> >>>>>> 200<br>>> >>>>>> bytes<br>>> >>>>>><br>>> >>>>>> 11:50:33.221717 IP6 (hlim 64, next-header IPv6 (41) payload<br>>> >>>>>> length:<br>
>> >>>>>> 72) xxxx:xxxx::13 > yyyy:yyyy::1: IP6 (hlim 64, next-header<br>>> >>>>>> Mobility<br>>> >>>>>> (135) payload length: 32) yyyy:yyyy:0:1300::1 > yyyy:yyyy::1:<br>
>> >>>>>> mobility: BU seq#=26817 AH lifetime=262140(padn)(alt-CoA:<br>>> >>>>>> xxxx:xxxx::13)<br>>> >>>>>><br>>> >>>>>> 11:50:33.319495 IP6 (hlim 64, next-header ICMPv6 (58) payload<br>
>> >>>>>> length:<br>>> >>>>>> 120) yyyy:yyyy::1 > xxxx:xxxx::13: [icmp6 sum ok] ICMP6,<br>>> >>>>>> destination<br>>> >>>>>> unreachable, length 120, unreachable port[|icmp6]<br>
>> >>>>>><br>>> >>>>>> radvd is running on HA with the following config:<br>>> >>>>>> interface eth0<br>>> >>>>>> {<br>>> >>>>>> AdvSendAdvert on;<br>
>> >>>>>> MinRtrAdvInterval 3;<br>>> >>>>>> MaxRtrAdvInterval 10;<br>>> >>>>>> AdvIntervalOpt on;<br>>> >>>>>> AdvHomeAgentFlag on;<br>
>> >>>>>> AdvHomeAgentInfo on;<br>>> >>>>>> HomeAgentLifetime 1800;<br>>> >>>>>> HomeAgentPreference 10;<br>>> >>>>>> AdvMobRtrSupportFlag off;<br>
>> >>>>>> prefix xxxx:xxxx::1/32<br>>> >>>>>> {<br>>> >>>>>> AdvRouterAddr on;<br>>> >>>>>> AdvOnLink on;<br>>> >>>>>> AdvAutonomous off;<br>
>> >>>>>> };<br>>> >>>>>> };<br>>> >>>>>><br>>> >>>>>> I have tried with prefix xxxx:xxxx::1/64 and AdvAutonomous on<br>>> >>>>>> but the<br>
>> >>>>>> result is still the same. And yes, radvd was restarted after<br>>> >>>>>> mip6d was<br>>> >>>>>> started.<br>>> >>>>>><br>
>> >>>>>> I assume that the BU's reach the HA but doesn't reach mip6d<br>>> >>>>>> running on<br>>> >>>>>> it since the icmp code says "unreachable port". Correct?<br>
>> >>>>>> What can cause it?<br>>> >>>>>><br>>> >>>>>> I've also tried with a recompiled debian 5.0 kernel and mip6d from<br>>> >>>>>> <a href="http://natisbad.org/" target="_blank">natisbad.org</a> with the same result.<br>
>> >>>>>><br>>> >>>>>> BR,<br>>> >>>>>> Mattias<br>>> >>>>>> _______________________________________________<br>>> >>>>>> Support mailing list<br>
>> >>>>>> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>>> >>>>>> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>
>> >>>>>><br>>> >>>>><br>>> >>>>> _______________________________________________<br>>> >>>>> Support mailing list<br>>> >>>>> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>
>> >>>>> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>>> >>>>><br>>> >>>> _______________________________________________<br>
>> >>>> Support mailing list<br>>> >>>> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>>> >>>> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>
>> >>>><br>>> >>><br>>> >>> _______________________________________________<br>>> >>> Support mailing list<br>>> >>> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>
>> >>> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>>> >>><br>>> >> _______________________________________________<br>
>> >> Support mailing list<br>>> >> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>>> >> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>
>> >><br>>> ><br>>> > _______________________________________________<br>>> > Support mailing list<br>>> > <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>
>> > <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>>> ><br>>> _______________________________________________<br>
>> Support mailing list<br>>> <a href="mailto:Support@ml.nautilus6.org">Support@ml.nautilus6.org</a><br>>> <a href="http://ml.nautilus6.org/mailman/listinfo/support" target="_blank">http://ml.nautilus6.org/mailman/listinfo/support</a><br>
><br>><br></div></div></blockquote></div><br>