diff options
-rw-r--r-- | net/xfrm/Kconfig | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig index d385a7869436..577a4f821b98 100644 --- a/net/xfrm/Kconfig +++ b/net/xfrm/Kconfig | |||
@@ -45,4 +45,19 @@ config NET_KEY | |||
45 | 45 | ||
46 | Say Y unless you know what you are doing. | 46 | Say Y unless you know what you are doing. |
47 | 47 | ||
48 | config NET_KEY_MIGRATE | ||
49 | bool "PF_KEY MIGRATE (EXPERIMENTAL)" | ||
50 | depends on NET_KEY && EXPERIMENTAL | ||
51 | select XFRM_MIGRATE | ||
52 | ---help--- | ||
53 | Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. | ||
54 | The PF_KEY MIGRATE message is used to dynamically update | ||
55 | locator(s) of a given IPsec security association. | ||
56 | This feature is required, for instance, in a Mobile IPv6 | ||
57 | environment with IPsec configuration where mobile nodes | ||
58 | change their attachment point to the Internet. Detail | ||
59 | information can be found in the internet-draft | ||
60 | <draft-sugimoto-mip6-pfkey-migrate>. | ||
61 | |||
62 | If unsure, say N. | ||
48 | 63 | ||