MIP6: MIGRATE

• Feature to update endpoint addresses (locators) of an IPsec tunnel:

  • Update src/dst addresses of the template of a given SPD entry.
  • Update src/dst addresses of the SAD entry associated with the SPD entry.

• Necessary for the MIP6 operation where an IPsec tunnel is established between MN and HA:

  • A necessary interactions between MIP6 and IPsec/IKE.
  • Can also be used for Mobile VPN (MOBIKE).

• The message can be sent/received via PF_KEY and Netlink (xfrm_user).

• The MIP6 component (mip6d) issues a MIGRATE message targeting a SPD entry.

  • Assumes that the MIP6 component is aware of the security policy configuration that is relevant to MIP6 protocol operation.