You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Proposal for new support. More investigations needed, though. Call for a design meeting early on!
ETSI's Harmonized CRA Requirements for routers, modems and switches (folder, direct link to specific version) provides info on authentication algorithms for routing protocols, see pasted table below.
FRR seems to provide support (doc), although I have not tried or investigated this.
Note: OSPFv3 ("OSPF for IPv6") initially did not include authentication trailer in the OSPF message; idea was to rely on IPsec for securing it. However, option for authentication trailer has been added (RFC7166), probably due to some issues with the use of OSPFv3 over IPsec.
FRR seems to have some support there too (doc).
Additional Information
There is a separate Infix feature request for IPsec (#1571)
General Information
Anyone can help out by sponsoring development of new features or contributing pull requests.
Please use this issue for discussions related to the feature.
Activity
troglobit commentedon Aug 6, 2026
Interesting! Was IPsec supposed to be used for all control protocols in IPv6? There's a certain appeal to that, very clever.