[PATCH (5/5)] [PFKEYV2]: CONFIG_NET_KEY_MIGRATE option
From: Shinta Sugimoto <hidden>
Date: 2007-02-08 03:10:07
Subsystem:
networking [general], networking [ipsec], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Steffen Klassert, Herbert Xu, Linus Torvalds
Add CONFIG_NET_KEY_MIGRATE option which makes it possible for user application to send or receive MIGRATE message to/from PF_KEY socket. Signed-off-by: Shinta Sugimoto <redacted> Signed-off-by: Masahide NAKAMURA <redacted> Signed-off-by: YOSHIFUJI Hideaki <redacted> --- net/xfrm/Kconfig | 15 +++++++++++++++ 1 files changed, 15 insertions(+), 0 deletions(-)
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index d385a78..577a4f8 100644
--- a/net/xfrm/Kconfig
+++ b/net/xfrm/Kconfig@@ -45,4 +45,19 @@ config NET_KEY Say Y unless you know what you are doing. +config NET_KEY_MIGRATE + bool "PF_KEY MIGRATE (EXPERIMENTAL)" + depends on NET_KEY && EXPERIMENTAL + select XFRM_MIGRATE + ---help--- + Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. + The PF_KEY MIGRATE message is used to dynamically update + locator(s) of a given IPsec security association. + This feature is required, for instance, in a Mobile IPv6 + environment with IPsec configuration where mobile nodes + change their attachment point to the Internet. Detail + information can be found in the internet-draft + <draft-sugimoto-mip6-pfkey-migrate>. + + If unsure, say N.
--
1.4.2