Patch-ID# 110396-05
Keywords: udp ip mipagent mipagent AAA reverse tunneling
Synopsis: SunOS 5.8_x86: udp ip mipagent
Date: 22/Jan/01

Solaris Release: 8_x86

SunOS release: 5.8_x86

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.8_x86: udp ip mipagent

BugId's fixed with this patch: 4278842 4302749 4310956 4313189 4317221 4320818 4324051 4335568 4360818 4370123 4370438 4375915 4375920 4376886 4377368 4377693 4377694 4378163 4378727 4379361 4382946 4382996 4382998 4383001 4383007 4386544 4390912 4391040 4392110 

Changes incorporated in this version: 4370438 4378727 4379361 4382946 4382996 4382998 4383001 4383007 4390912 4391040 4392110

Relevant Architectures: i386

Patches accumulated and obsoleted by this patch: 110199-01 110551-01 

Patches which conflict with this patch: 

Patches required with this patch: 109741-04 109280-09 109743-03 109473-05 (or newer)

Obsoleted by: 

Files included with this patch:

/etc/inet/mipagent.conf-sample
/etc/inet/mipagent.conf.fa-sample
/etc/inet/mipagent.conf.ha-sample
/usr/lib/inet/mipagent
/usr/sbin/mipagentconfig
/usr/sbin/mipagentstat

Problem Description:

4382946 Router IP Address needs to be converted to network byte order
4383001 More optimal to validate FA HA auth ext & MN HA auth ext before aaa call vs afte
4382996 Potential deadlock when closing a session and starting new one with same NAI
4383007 Upon HA binding expire mipagent should do a Accounting Stop Request
4382998 Per aaa spec shouldn't be checking for MN addr & Home Agent addr AVP with OSA
4379361 Reverese Tunneling AVP should be processed
4390912 mipagent sample files to be updated with reverse tunnel info
4391040 agentInit.c has wrong definition and call for delFAVEptr
4392110 Change forcefullyDeregisterMN to take homeagent addr and homeaddr
4378727 visitors on a FA may get mixed up when private overlaped addresses are used
4370438 mipagent termination cleanup code needs enhancement

(from 110396-04)

      This patch revision was generated to accumulate and obsolete the 
      feature changes introduced in feature point patch 110551-01

(from 110396-03)

4386544 s28U3 Generic Patches Accumulating PP Requirements

(from 110396-02)

4377368 FA doesn't save the challenge when it includes it in RegRpy -so no way to verify
4378163 Foreign Agent does not accept deregistrations correctly
4377693 Visitor entry should not be deleted if re-registration fails
4377694 Mobile Node NAI does not print correctly
4375915 FA hangs when two mobile nodes using same HA and FA expire reglife time

(from 110396-01)

      This patch revision was generated to accumulate and obsolete the 
      feature changes introduced in point patch 110199-01.

4317221 mipagent needs to read IP TTL to fully  support  reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken

(from 110199-01)

4317221 mipagent needs to read IP TTL to fully  support  reverse tunneling
4302749 Foreign Agent should not broadcast ARP for Mobile Nodes Link Layer address
4310956 ARP support needed for Mobile IP addresses
4320818 add radius hooks to mipagent daemon
4335568 mipagent's generic auth extension processing is broken

(from 110551-01)

4278842 Add reverse tunneling to Foreign Agent and Home Agent
4313189 Mipagent needs to use routing socket to add/delete routes for rev-tun support
4324051 Mipagent needs to have a socket option to route reg reply directly to MN
4360818 Provide kernel support for Reverse tunneling and private addressing
4370123 AAA extensions to RADIUS interface between mipagent and radius
4376886 mipagent doesn't work with PPP interfaces
4375920 Foreign agent does not create two tunnels to HA when different COAs used

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 

        NOTE 1: To get Network Multipathing offlining capability, one needs
                to install the following patches:

                109280-07 (or newer)    /kernel/drv/ip patch
                109741-03 (or newer)    /kernel/drv/udp patch
                109903-02 (or newer)    /usr/lib/inet/in.ndpd patch
                109905-02 (or newer)    /sbin/in.mpathd patch
                109907-03 (or newer)    /sbin/ifconfig patch
                110396-01 (or newer)    /usr/lib/inet/mipagent patch

	NOTE 2: To get the complete support for the following:

                Add reverse tunneling to Foreign Agent and Home Agent
                Mipagent needs to use routing socket to add/delete 
                        routes for rev-tun support
                Mipagent needs to have a socket option to route reg 
                        reply directly to MN
                Provide kernel support for Reverse tunneling and 
                        private addressing

                one needs to install the following patches:

                110396-04 (or newer)    mipagent patch
                109280-09 (or newer)    ip/ipsecah patch
                109741-04 (or newer)    udp patch
                109743-03 (or newer)    icmp patch
                109473-05 (or newer)    tcp patch

