<br><br><div class="gmail_quote">On 31 December 2010 18:44, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On Fri, 31 Dec 2010, Patricia de Noriega wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I'm newbie using openswan and I need evaluate the mobility issues of<br>
IPsec. I like to develop a simple client that can manage a tunnel<br>
established when a change of IP (src or dest) occurs without re-establish<br>
it, i.e, when one of the end points changes its IP addr due to its mobile<br>
nature.<br>
</blockquote>
<br></div>
You should look at the various IETF work done in this aspect. I think<br>
you might want to look at mobike? <a href="https://tools.ietf.org/html/rfc5265" target="_blank">https://tools.ietf.org/html/rfc5265</a><div class="im"><br>
<br></div></blockquote><div> </div><div>I didn't know this RFC, I'll take a look. This is my first job related to security. Thanks.<br> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I think this could be managed sending SADB_UPDATE messages to both<br>
kernels updating the IP that is changing. My problem is, how can I do<br>
that? I have been reading the source code and many scripts but I haven't<br>
found nothing relevant. Where can I add some code (or using existing) to<br>
emulate this behaviour?<br>
</blockquote>
<br></div>
I would strongly recommend looking at existing work done in this area<br>
and focus on adding such support to openswan, over any custom solutions<br>
you might think of. There are many security implications.<br><font color="#888888">
<br></font></blockquote><div><br>It exists any work done about this? Where can I find it? :)<br><br>Don't mind the security implications. My work (researcher) consists on evaluate these implications in order to use an IPsec modification (my original scenario uses IPsec) to provide mobility. <br>
<br>Thanks again!<br> </div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><font color="#888888">
Paul<br>
</font></blockquote></div><br>