Re: [Ikev2-devel] IPv6 support?

[Stjepan G. <sg...@ze...>]

On Sun, 2008-10-05 at 19:44 +0200, Zoltán Faigl wrote:
> I downloaded the beta1 version, and I could see in the logfile, that
> it enumerates IPv6 addresses, so I saw, that ipv6 may work.
> After playing with the security policy database to protect only icmpv6
> echo messages (and to let go ICMPv6 neighbor discovery messages ), it
> worked well. The responder however can only use IPv4 to communicate
> with freeradius. I read that freeradius 2.0 supports IPv6, however, I
> think that ikev2 responder uses an older freeradius client. 

We hadn't plan of using IPv6 to contact freeradius, but I think it
wouldn't be large change. We are not using any freeradius client but
ikev2 "manually" creates and parses RADIUS packets.

> Now, I will be able to measure several authentication methods through
> UMTS/HSDPA having native IPv6 access. I have still problems with
> EAP-SIM authentication method. Has anybody tested  EAP-SIM
> authentication?

No, we haven't tested this scenario. But, EAP-SIM authentication is
implemented in wpasupplicant so you should look there if EAP-SIM doesn't
work. ikev2 behaves as a relay for EAP messages and it doesn't look into
them (apart from searching for success/failure messages). It could be
that the wpasupplicant version used in ikev2 has bugs.

Stjepan