11da177e4SLinus Torvalds# 21da177e4SLinus Torvalds# IPv6 configuration 31da177e4SLinus Torvalds# 46a2e9b73SSam Ravnborg 56a2e9b73SSam Ravnborg# IPv6 as module will cause a CRASH if you try to unload it 60b18542bSJan Engelhardtmenuconfig IPV6 76a2e9b73SSam Ravnborg tristate "The IPv6 protocol" 86a2e9b73SSam Ravnborg default m 96a2e9b73SSam Ravnborg ---help--- 106a2e9b73SSam Ravnborg This is complemental support for the IP version 6. 116a2e9b73SSam Ravnborg You will still be able to do traditional IPv4 networking as well. 126a2e9b73SSam Ravnborg 136a2e9b73SSam Ravnborg For general information about IPv6, see 146a2e9b73SSam Ravnborg <http://playground.sun.com/pub/ipng/html/ipng-main.html>. 156a2e9b73SSam Ravnborg For Linux IPv6 development information, see <http://www.linux-ipv6.org>. 166a2e9b73SSam Ravnborg For specific information about IPv6 under Linux, read the HOWTO at 176a2e9b73SSam Ravnborg <http://www.bieringer.de/linux/IPv6/>. 186a2e9b73SSam Ravnborg 196a2e9b73SSam Ravnborg To compile this protocol support as a module, choose M here: the 206a2e9b73SSam Ravnborg module will be called ipv6. 216a2e9b73SSam Ravnborg 220b18542bSJan Engelhardtif IPV6 230b18542bSJan Engelhardt 241da177e4SLinus Torvaldsconfig IPV6_PRIVACY 25692105b8SMatt LaPlante bool "IPv6: Privacy Extensions (RFC 3041) support" 261da177e4SLinus Torvalds ---help--- 271da177e4SLinus Torvalds Privacy Extensions for Stateless Address Autoconfiguration in IPv6 28692105b8SMatt LaPlante support. With this option, additional periodically-altered 29692105b8SMatt LaPlante pseudo-random global-scope unicast address(es) will be assigned to 301da177e4SLinus Torvalds your interface(s). 311da177e4SLinus Torvalds 32692105b8SMatt LaPlante We use our standard pseudo-random algorithm to generate the 33692105b8SMatt LaPlante randomized interface identifier, instead of one described in RFC 3041. 34955189efSYOSHIFUJI Hideaki 35692105b8SMatt LaPlante By default the kernel does not generate temporary addresses. 361da177e4SLinus Torvalds To use temporary addresses, do 371da177e4SLinus Torvalds 381da177e4SLinus Torvalds echo 2 >/proc/sys/net/ipv6/conf/all/use_tempaddr 391da177e4SLinus Torvalds 401da177e4SLinus Torvalds See <file:Documentation/networking/ip-sysctl.txt> for details. 411da177e4SLinus Torvalds 42ebacaaa0SYOSHIFUJI Hideakiconfig IPV6_ROUTER_PREF 43ebacaaa0SYOSHIFUJI Hideaki bool "IPv6: Router Preference (RFC 4191) support" 44ebacaaa0SYOSHIFUJI Hideaki ---help--- 45ebacaaa0SYOSHIFUJI Hideaki Router Preference is an optional extension to the Router 46692105b8SMatt LaPlante Advertisement message which improves the ability of hosts 47692105b8SMatt LaPlante to pick an appropriate router, especially when the hosts 48692105b8SMatt LaPlante are placed in a multi-homed network. 49ebacaaa0SYOSHIFUJI Hideaki 50ebacaaa0SYOSHIFUJI Hideaki If unsure, say N. 51ebacaaa0SYOSHIFUJI Hideaki 5270ceb4f5SYOSHIFUJI Hideakiconfig IPV6_ROUTE_INFO 53*f9ceb16eSKees Cook bool "IPv6: Route Information (RFC 4191) support" 54*f9ceb16eSKees Cook depends on IPV6_ROUTER_PREF 5570ceb4f5SYOSHIFUJI Hideaki ---help--- 5670ceb4f5SYOSHIFUJI Hideaki This is experimental support of Route Information. 5770ceb4f5SYOSHIFUJI Hideaki 5870ceb4f5SYOSHIFUJI Hideaki If unsure, say N. 5970ceb4f5SYOSHIFUJI Hideaki 6095c385b4SNeil Hormanconfig IPV6_OPTIMISTIC_DAD 61*f9ceb16eSKees Cook bool "IPv6: Enable RFC 4429 Optimistic DAD" 6295c385b4SNeil Horman ---help--- 6395c385b4SNeil Horman This is experimental support for optimistic Duplicate 6495c385b4SNeil Horman Address Detection. It allows for autoconfigured addresses 6595c385b4SNeil Horman to be used more quickly. 6695c385b4SNeil Horman 6795c385b4SNeil Horman If unsure, say N. 6895c385b4SNeil Horman 691da177e4SLinus Torvaldsconfig INET6_AH 701da177e4SLinus Torvalds tristate "IPv6: AH transformation" 717e152524SJan Beulich select XFRM_ALGO 721da177e4SLinus Torvalds select CRYPTO 731da177e4SLinus Torvalds select CRYPTO_HMAC 741da177e4SLinus Torvalds select CRYPTO_MD5 751da177e4SLinus Torvalds select CRYPTO_SHA1 761da177e4SLinus Torvalds ---help--- 771da177e4SLinus Torvalds Support for IPsec AH. 781da177e4SLinus Torvalds 791da177e4SLinus Torvalds If unsure, say Y. 801da177e4SLinus Torvalds 811da177e4SLinus Torvaldsconfig INET6_ESP 821da177e4SLinus Torvalds tristate "IPv6: ESP transformation" 837e152524SJan Beulich select XFRM_ALGO 841da177e4SLinus Torvalds select CRYPTO 85ed58dd41SHerbert Xu select CRYPTO_AUTHENC 861da177e4SLinus Torvalds select CRYPTO_HMAC 871da177e4SLinus Torvalds select CRYPTO_MD5 886b7326c8SHerbert Xu select CRYPTO_CBC 891da177e4SLinus Torvalds select CRYPTO_SHA1 901da177e4SLinus Torvalds select CRYPTO_DES 911da177e4SLinus Torvalds ---help--- 921da177e4SLinus Torvalds Support for IPsec ESP. 931da177e4SLinus Torvalds 941da177e4SLinus Torvalds If unsure, say Y. 951da177e4SLinus Torvalds 961da177e4SLinus Torvaldsconfig INET6_IPCOMP 971da177e4SLinus Torvalds tristate "IPv6: IPComp transformation" 98d2acc347SHerbert Xu select INET6_XFRM_TUNNEL 996fccab67SHerbert Xu select XFRM_IPCOMP 1001da177e4SLinus Torvalds ---help--- 1011da177e4SLinus Torvalds Support for IP Payload Compression Protocol (IPComp) (RFC3173), 1021da177e4SLinus Torvalds typically needed for IPsec. 1031da177e4SLinus Torvalds 1041da177e4SLinus Torvalds If unsure, say Y. 1051da177e4SLinus Torvalds 106ee538268SMasahide NAKAMURAconfig IPV6_MIP6 107*f9ceb16eSKees Cook tristate "IPv6: Mobility" 108ee538268SMasahide NAKAMURA select XFRM 109ee538268SMasahide NAKAMURA ---help--- 110ee538268SMasahide NAKAMURA Support for IPv6 Mobility described in RFC 3775. 111ee538268SMasahide NAKAMURA 112ee538268SMasahide NAKAMURA If unsure, say N. 113ee538268SMasahide NAKAMURA 114d2acc347SHerbert Xuconfig INET6_XFRM_TUNNEL 115d2acc347SHerbert Xu tristate 116d2acc347SHerbert Xu select INET6_TUNNEL 117d2acc347SHerbert Xu default n 1181da177e4SLinus Torvalds 119d2acc347SHerbert Xuconfig INET6_TUNNEL 120d2acc347SHerbert Xu tristate 121d2acc347SHerbert Xu default n 1221da177e4SLinus Torvalds 123b59f45d0SHerbert Xuconfig INET6_XFRM_MODE_TRANSPORT 124b59f45d0SHerbert Xu tristate "IPv6: IPsec transport mode" 125b59f45d0SHerbert Xu default IPV6 126b59f45d0SHerbert Xu select XFRM 127b59f45d0SHerbert Xu ---help--- 128b59f45d0SHerbert Xu Support for IPsec transport mode. 129b59f45d0SHerbert Xu 130b59f45d0SHerbert Xu If unsure, say Y. 131b59f45d0SHerbert Xu 132b59f45d0SHerbert Xuconfig INET6_XFRM_MODE_TUNNEL 133b59f45d0SHerbert Xu tristate "IPv6: IPsec tunnel mode" 134b59f45d0SHerbert Xu default IPV6 135b59f45d0SHerbert Xu select XFRM 136b59f45d0SHerbert Xu ---help--- 137b59f45d0SHerbert Xu Support for IPsec tunnel mode. 138b59f45d0SHerbert Xu 139b59f45d0SHerbert Xu If unsure, say Y. 140b59f45d0SHerbert Xu 1410a69452cSDiego Beltramiconfig INET6_XFRM_MODE_BEET 1420a69452cSDiego Beltrami tristate "IPv6: IPsec BEET mode" 1430a69452cSDiego Beltrami default IPV6 1440a69452cSDiego Beltrami select XFRM 1450a69452cSDiego Beltrami ---help--- 1460a69452cSDiego Beltrami Support for IPsec BEET mode. 1470a69452cSDiego Beltrami 1480a69452cSDiego Beltrami If unsure, say Y. 1490a69452cSDiego Beltrami 1501d71627dSMasahide NAKAMURAconfig INET6_XFRM_MODE_ROUTEOPTIMIZATION 151*f9ceb16eSKees Cook tristate "IPv6: MIPv6 route optimization mode" 1521d71627dSMasahide NAKAMURA select XFRM 1531d71627dSMasahide NAKAMURA ---help--- 1541d71627dSMasahide NAKAMURA Support for MIPv6 route optimization mode. 1551d71627dSMasahide NAKAMURA 156989e5b96SJoerg Roedelconfig IPV6_SIT 157989e5b96SJoerg Roedel tristate "IPv6: IPv6-in-IPv4 tunnel (SIT driver)" 158c73cb5a2SKazunori MIYAZAWA select INET_TUNNEL 159de357cc0SYOSHIFUJI Hideaki select IPV6_NDISC_NODETYPE 160989e5b96SJoerg Roedel default y 161989e5b96SJoerg Roedel ---help--- 162989e5b96SJoerg Roedel Tunneling means encapsulating data of one protocol type within 163989e5b96SJoerg Roedel another protocol and sending it over a channel that understands the 164989e5b96SJoerg Roedel encapsulating protocol. This driver implements encapsulation of IPv6 1655c5d6dabSDavid S. Miller into IPv4 packets. This is useful if you want to connect two IPv6 166989e5b96SJoerg Roedel networks over an IPv4-only path. 167989e5b96SJoerg Roedel 1684737f097SPavel Machek Saying M here will produce a module called sit. If unsure, say Y. 169989e5b96SJoerg Roedel 170fa857afcSYOSHIFUJI Hideaki / 吉藤英明config IPV6_SIT_6RD 171*f9ceb16eSKees Cook bool "IPv6: IPv6 Rapid Deployment (6RD)" 172*f9ceb16eSKees Cook depends on IPV6_SIT 173fa857afcSYOSHIFUJI Hideaki / 吉藤英明 default n 174fa857afcSYOSHIFUJI Hideaki / 吉藤英明 ---help--- 175fa857afcSYOSHIFUJI Hideaki / 吉藤英明 IPv6 Rapid Deployment (6rd; draft-ietf-softwire-ipv6-6rd) builds upon 176fa857afcSYOSHIFUJI Hideaki / 吉藤英明 mechanisms of 6to4 (RFC3056) to enable a service provider to rapidly 177fa857afcSYOSHIFUJI Hideaki / 吉藤英明 deploy IPv6 unicast service to IPv4 sites to which it provides 178fa857afcSYOSHIFUJI Hideaki / 吉藤英明 customer premise equipment. Like 6to4, it utilizes stateless IPv6 in 179fa857afcSYOSHIFUJI Hideaki / 吉藤英明 IPv4 encapsulation in order to transit IPv4-only network 180fa857afcSYOSHIFUJI Hideaki / 吉藤英明 infrastructure. Unlike 6to4, a 6rd service provider uses an IPv6 181fa857afcSYOSHIFUJI Hideaki / 吉藤英明 prefix of its own in place of the fixed 6to4 prefix. 182fa857afcSYOSHIFUJI Hideaki / 吉藤英明 183fa857afcSYOSHIFUJI Hideaki / 吉藤英明 With this option enabled, the SIT driver offers 6rd functionality by 184fa857afcSYOSHIFUJI Hideaki / 吉藤英明 providing additional ioctl API to configure the IPv6 Prefix for in 185fa857afcSYOSHIFUJI Hideaki / 吉藤英明 stead of static 2002::/16 for 6to4. 186fa857afcSYOSHIFUJI Hideaki / 吉藤英明 187fa857afcSYOSHIFUJI Hideaki / 吉藤英明 If unsure, say N. 188fa857afcSYOSHIFUJI Hideaki / 吉藤英明 189de357cc0SYOSHIFUJI Hideakiconfig IPV6_NDISC_NODETYPE 190de357cc0SYOSHIFUJI Hideaki bool 191de357cc0SYOSHIFUJI Hideaki 1921da177e4SLinus Torvaldsconfig IPV6_TUNNEL 19338fe999eSYOSHIFUJI Hideaki tristate "IPv6: IP-in-IPv6 tunnel (RFC2473)" 194d2acc347SHerbert Xu select INET6_TUNNEL 1951da177e4SLinus Torvalds ---help--- 19638fe999eSYOSHIFUJI Hideaki Support for IPv6-in-IPv6 and IPv4-in-IPv6 tunnels described in 19738fe999eSYOSHIFUJI Hideaki RFC 2473. 1981da177e4SLinus Torvalds 1991da177e4SLinus Torvalds If unsure, say N. 2001da177e4SLinus Torvalds 201c12b395aSxeb@mail.ruconfig IPV6_GRE 202c12b395aSxeb@mail.ru tristate "IPv6: GRE tunnel" 203c12b395aSxeb@mail.ru select IPV6_TUNNEL 204c12b395aSxeb@mail.ru ---help--- 205c12b395aSxeb@mail.ru Tunneling means encapsulating data of one protocol type within 206c12b395aSxeb@mail.ru another protocol and sending it over a channel that understands the 207c12b395aSxeb@mail.ru encapsulating protocol. This particular tunneling driver implements 208c12b395aSxeb@mail.ru GRE (Generic Routing Encapsulation) and at this time allows 209c12b395aSxeb@mail.ru encapsulating of IPv4 or IPv6 over existing IPv6 infrastructure. 210c12b395aSxeb@mail.ru This driver is useful if the other endpoint is a Cisco router: Cisco 211c12b395aSxeb@mail.ru likes GRE much better than the other Linux tunneling driver ("IP 212c12b395aSxeb@mail.ru tunneling" above). In addition, GRE allows multicast redistribution 213c12b395aSxeb@mail.ru through the tunnel. 214c12b395aSxeb@mail.ru 215c12b395aSxeb@mail.ru Saying M here will produce a module called ip6_gre. If unsure, say N. 216c12b395aSxeb@mail.ru 217264e91b6SVille Nuorvalaconfig IPV6_MULTIPLE_TABLES 218264e91b6SVille Nuorvala bool "IPv6: Multiple Routing Tables" 219264e91b6SVille Nuorvala select FIB_RULES 220264e91b6SVille Nuorvala ---help--- 221264e91b6SVille Nuorvala Support multiple routing tables. 222264e91b6SVille Nuorvala 2234e96c2b4SYOSHIFUJI Hideakiconfig IPV6_SUBTREES 2244e96c2b4SYOSHIFUJI Hideaki bool "IPv6: source address based routing" 225264e91b6SVille Nuorvala depends on IPV6_MULTIPLE_TABLES 2264e96c2b4SYOSHIFUJI Hideaki ---help--- 2274e96c2b4SYOSHIFUJI Hideaki Enable routing by source address or prefix. 2284e96c2b4SYOSHIFUJI Hideaki 2294e96c2b4SYOSHIFUJI Hideaki The destination address is still the primary routing key, so mixing 2304e96c2b4SYOSHIFUJI Hideaki normal and source prefix specific routes in the same routing table 2314e96c2b4SYOSHIFUJI Hideaki may sometimes lead to unintended routing behavior. This can be 2324e96c2b4SYOSHIFUJI Hideaki avoided by defining different routing tables for the normal and 2334e96c2b4SYOSHIFUJI Hideaki source prefix specific routes. 2344e96c2b4SYOSHIFUJI Hideaki 2354e96c2b4SYOSHIFUJI Hideaki If unsure, say N. 2364e96c2b4SYOSHIFUJI Hideaki 2377bc570c8SYOSHIFUJI Hideakiconfig IPV6_MROUTE 238*f9ceb16eSKees Cook bool "IPv6: multicast routing" 239*f9ceb16eSKees Cook depends on IPV6 2407bc570c8SYOSHIFUJI Hideaki ---help--- 2417bc570c8SYOSHIFUJI Hideaki Experimental support for IPv6 multicast forwarding. 2427bc570c8SYOSHIFUJI Hideaki If unsure, say N. 2437bc570c8SYOSHIFUJI Hideaki 244d1db275dSPatrick McHardyconfig IPV6_MROUTE_MULTIPLE_TABLES 245d1db275dSPatrick McHardy bool "IPv6: multicast policy routing" 246d1db275dSPatrick McHardy depends on IPV6_MROUTE 247d1db275dSPatrick McHardy select FIB_RULES 248d1db275dSPatrick McHardy help 249d1db275dSPatrick McHardy Normally, a multicast router runs a userspace daemon and decides 250d1db275dSPatrick McHardy what to do with a multicast packet based on the source and 251d1db275dSPatrick McHardy destination addresses. If you say Y here, the multicast router 252d1db275dSPatrick McHardy will also be able to take interfaces and packet marks into 253d1db275dSPatrick McHardy account and run multiple instances of userspace daemons 254d1db275dSPatrick McHardy simultaneously, each one handling a single table. 255d1db275dSPatrick McHardy 256d1db275dSPatrick McHardy If unsure, say N. 257d1db275dSPatrick McHardy 25814fb64e1SYOSHIFUJI Hideakiconfig IPV6_PIMSM_V2 259*f9ceb16eSKees Cook bool "IPv6: PIM-SM version 2 support" 26014fb64e1SYOSHIFUJI Hideaki depends on IPV6_MROUTE 26114fb64e1SYOSHIFUJI Hideaki ---help--- 26214fb64e1SYOSHIFUJI Hideaki Support for IPv6 PIM multicast routing protocol PIM-SMv2. 26314fb64e1SYOSHIFUJI Hideaki If unsure, say N. 26414fb64e1SYOSHIFUJI Hideaki 2650b18542bSJan Engelhardtendif # IPV6 266