[strongSwan-dev] MOBIKE

[Patricia de Noriega]

Hi all,

I'm trying some MOBIKE scenarios over UML (User Mode Linux) and it works
when I send some ICMP messages. However, I'd like to do some tests with
other traffic such as streaming or real time voice.

After establish a MOBIKE session, I've sent UDP traffic by means of IPERF
and TCP by copiying a directory using the SCP command. Traffic goes through
the tunnel but when I disable the current interface the traffic goes through
other available interface but not through the tunnel prevously established.
I've checked charon.log and it seems that MOBIKE works correctly.

This is the client's charon.log

05[IKE] CHILD_SA mobike{1} established with SPIs c30a0368_i cc0eb9e6_o and
TS 192.168.100.20/32 === 192.168.100.10/32
05[IKE] received AUTH_LIFETIME of 3398s, scheduling reauthentication in
3218s
05[IKE] peer supports MOBIKE
10[KNL] interface eth0 deactivated
10[KNL] fe80::fcfd:ff:fe00:300 disappeared from eth0
01[IKE] requesting address change using MOBIKE
01[ENC] generating INFORMATIONAL request 2 [ N(ADD_4_ADDR) ]
01[IKE] checking original path 192.168.100.21[4500] - 192.168.100.10[4500]
01[NET] sending packet: from 192.168.100.21[4500] to 192.168.100.10[4500]
09[NET] received packet: from 192.168.100.10[4500] to 192.168.100.21[4500]
09[ENC] parsed INFORMATIONAL response 2 [ ]
09[KNL] received netlink error: No such process (3)
09[KNL] error uninstalling route installed with policy 192.168.100.10/32 ===
192.168.100.20/32 fwd
09[ENC] generating INFORMATIONAL request 3 [ N(UPD_SA_ADDR) N(NATD_S_IP)
N(NATD_D_IP) N(COOKIE2) ]
09[NET] sending packet: from 192.168.100.21[4500] to 192.168.100.10[4500]
15[NET] received packet: from 192.168.100.10[4500] to 192.168.100.21[4500]
15[ENC] parsed INFORMATIONAL response 3 [ N(NATD_S_IP) N(NATD_D_IP)
N(COOKIE2) ]


Has anyone test MOBIKE with application layer traffic?

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20110411/f5bf6e86/attachment.html>