1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
|
Realm Specific IP (RSIP) Parameters - RFC 3103 and RFC 3104
RSIP Parameters
-address types
-tunnel types
-RSIP methods
-flow policy
-vendor ID
RSIP message type codes
RSIP error codes
RSIP Parameters
Value Parameter Reference
----- --------------------- ---------
1 Address [RFC3103]
2 Ports [RFC3103]
3 Lease Time [RFC3103]
4 Client ID [RFC3103]
5 Bind ID [RFC3103]
6 Tunnel Type [RFC3103]
7 RSIP Method [RFC3103]
8 Error [RFC3103]
9 Flow Policy [RFC3103]
10 Indicator [RFC3103]
11 Message Counter [RFC3103]
12 Vendor Specific Parameter [RFC3103]
13-21 Assigned by IANA
22 SPI [RFC3104]
23-240 Assigned by IANA
241-255 Reserved for private use
RSIP address types
Length of value
Value Addrtype field (in bytes) Reference
----- -------- ---------------- ---------
0 Reserved 0 [RFC3103]
1 IPv4 4 [RFC3103]
2 IPv4 netmask 4 [RFC3103]
3 IPv6 16 [RFC3103]
4 FQDN varies [RFC3103]
RSIP Tunnel Types
Value Tunnel Type Reference
----- ----------- ---------
0 Reserved [RFC3103]
1 IP-IP [RFC3103]
2 GRE [RFC3103]
3 L2TP [RFC3103]
RSIP Methods
Value RSIP method Reference
----- ----------- ---------
0 Reserved [RFC3103]
1 RSA-IP [RFC3103]
2 RSAP-IP [RFC3103]
3 RSIP with IPsec (RSIPSEC) [RFC3104]
RSIP Flow Policies
Value Flow Policy Reference
----- ----------- ---------
0 Reserved [RFC3103]
1 Macro flows [RFC3103]
2 Micro flows [RFC3103]
3 No policy [RFC3103]
RSIP Vendor ID's
Value Vendor ID Reference
----- ----------- ---------
0 Reserved [RFC3103]
RSIP Message Types
Value Message Implementation Status Reference
----- --------------------- -------------- ---------- ---------
0 Reserved
1 ERROR_RESPONSE gateway mandatory [RFC3103]
2 REGISTER_REQUEST host mandatory [RFC3103]
3 REGISTER_RESPONSE gateway mandatory [RFC3103]
4 DE-REGISTER_REQUEST host mandatory [RFC3103]
5 DE-REGISTER_RESPONSE gateway mandatory [RFC3103]
6 ASSIGN_REQUEST_RSA-IP host optional [RFC3103]
7 ASSIGN_RESPONSE_RSA-IP gateway optional [RFC3103]
8 ASSIGN_REQUEST_RSAP-IP host mandatory [RFC3103]
9 ASSIGN_RESPONSE_RSAP-IP gateway mandatory [RFC3103]
10 EXTEND_REQUEST host mandatory [RFC3103]
11 EXTEND_RESPONSE gateway mandatory [RFC3103]
12 FREE_REQUEST host mandatory [RFC3103]
13 FREE_RESPONSE gateway mandatory [RFC3103]
14 QUERY_REQUEST host optional [RFC3103]
15 QUERY_RESPONSE gateway mandatory [RFC3103]
16 LISTEN_REQUEST host optional [RFC3103]
17 LISTEN_RESPONSE gateway optional [RFC3103]
18-21 Assigned by IANA
22 ASSIGN_REQUEST_RSIPSEC host optional [RFC3104]
23 ASSIGN_RESPONSE_RSIPSEC gateway optional [RFC3104]
24-240 Assigned by IANA
241-255 Reserved for private use
RSIP Error Codes
Code Description Reference
---- --------------------------------- ---------
100's: General errors.
101: UNKNOWN_ERROR [RFC3103]
102: USE_TCP [RFC3103]
103: FLOW_POLICY_VIOLATION [RFC3103]
104: INTERNAL_SERVER_ERROR [RFC3103]
105: MESSAGE_COUNTER_REQUIRED [RFC3103]
200's: Parameter and message errors. The gateway uses these errors
when it detects that a parameter or message is malformed, as
well as when it does not understand a parameter or message.
201: MISSING_PARAM [RFC3103]
202: DUPLICATE_PARAM [RFC3103]
203: EXTRA_PARAM [RFC3103]
204: ILLEGAL_PARAM [RFC3103]
205: BAD_PARAM [RFC3103]
206: ILLEGAL_MESSAGE [RFC3103]
207: BAD_MESSAGE [RFC3103]
208: UNSUPPORTED_MESSAGE [RFC3103]
300's: Permission, resource, and policy errors. The gateway uses these
errors when a host has attempted to do something that it is
not permitted to do, or something that violated gateway policy.
301: REGISTER_FIRST [RFC3103]
302: ALREADY_REGISTERED [RFC3103]
303: ALREADY_UNREGISTERED [RFC3103]
304: REGISTRATION_DENIED [RFC3103]
305: BAD_CLIENT_ID [RFC3103]
306: BAD_BIND_ID [RFC3103]
307: BAD_TUNNEL_TYPE [RFC3103]
308: LOCAL_ADDR_UNAVAILABLE [RFC3103]
309: LOCAL_ADDRPORT_UNAVAILABLE [RFC3103]
310: LOCAL_ADDR_INUSE [RFC3103]
311: LOCAL_ADDRPORT_INUSE [RFC3103]
312: LOCAL_ADDR_UNALLOWED [RFC3103]
313: LOCAL_ADDRPORT_UNALLOWED [RFC3103]
314: REMOTE_ADDR_UNALLOWED [RFC3103]
315: REMOTE_ADDRPORT_UNALLOWED [RFC3103]
400's: IPsec errors. All errors specific to RSIP / IPsec operation.
401: IPSEC_UNALLOWED [RFC3104]
402: IPSEC_SPI_UNAVAILABLE [RFC3104]
403: IPSEC_SPI_INUSE [RFC3104]
References
----------
[RFC3103] M. Borella, D. Grabelsky, J. Lo, and K. Tuniguchi, "Realm
Specific IP: Protocol Specification", RFC 3103, Month Year.
[RFC3104] G. Montenegro and M. Borella, "RSIP Support for End-to-end
IPsec", RFC 3104, Month Year.
(created Apr 20 2001)
(last updated May 09 2001)
[]
|
