Re: Regarding xfrm state search with destination address as wildcard mask

Hi Any help on this query is greatly appreciated. Thanks, - Balaji On Thu, Jul 6, 2017 at 12:21 PM, Balaji Foss wrote: > Hi All, > > Im trying to implement IPSec for ospfv3 as per RFC4552 on Linux kernel > version 3.16.39. > Requirement is to support IPsec encryption/authentication for ospfv3

Regarding xfrm state search with destination address as wildcard mask

Hi All, Im trying to implement IPSec for ospfv3 as per RFC4552 on Linux kernel version 3.16.39. Requirement is to support IPsec encryption/authentication for ospfv3 traffic. As of now, this can be achieved by following set of SA and SP rules. ip xfrm state add src :: dst ff02::5 proto ah spi 0x40