Mobile IPv6 HOWTO

Starting with version 4.2.9, strongSwan can be used to secure the Mobile IPv6 Binding Update messages and all payload traffic between a Mobile Node (MN) and its Home Agent (HA) using an IPsec transport and an IPsec tunnel Security Association (SA), respectively. strongSwan updates its connection information after a dynamic change of the Mobile Node's Care-of-Address (CoA) based on the KMADDRESS field contained in the XFRM_MSG_MIGRATE messages sent by the mip6d daemon via the Linux kernel (version >= 2.6.28 or appropriately patched). For the installation and configuration of the IPsec-enabled Mobile IPv6 mip6d daemon consult Arnaud Ebalard's fine MIPv6 site.