1# 2# IPv6 configuration 3# 4 5# IPv6 as module will cause a CRASH if you try to unload it 6menuconfig IPV6 7 tristate "The IPv6 protocol" 8 default y 9 ---help--- 10 Support for IP version 6 (IPv6). 11 12 For general information about IPv6, see 13 <https://en.wikipedia.org/wiki/IPv6>. 14 For specific information about IPv6 under Linux, see 15 Documentation/networking/ipv6.txt and read the HOWTO at 16 <http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/> 17 18 To compile this protocol support as a module, choose M here: the 19 module will be called ipv6. 20 21if IPV6 22 23config IPV6_ROUTER_PREF 24 bool "IPv6: Router Preference (RFC 4191) support" 25 ---help--- 26 Router Preference is an optional extension to the Router 27 Advertisement message which improves the ability of hosts 28 to pick an appropriate router, especially when the hosts 29 are placed in a multi-homed network. 30 31 If unsure, say N. 32 33config IPV6_ROUTE_INFO 34 bool "IPv6: Route Information (RFC 4191) support" 35 depends on IPV6_ROUTER_PREF 36 ---help--- 37 This is experimental support of Route Information. 38 39 If unsure, say N. 40 41config IPV6_OPTIMISTIC_DAD 42 bool "IPv6: Enable RFC 4429 Optimistic DAD" 43 ---help--- 44 This is experimental support for optimistic Duplicate 45 Address Detection. It allows for autoconfigured addresses 46 to be used more quickly. 47 48 If unsure, say N. 49 50config INET6_AH 51 tristate "IPv6: AH transformation" 52 select XFRM_ALGO 53 select CRYPTO 54 select CRYPTO_HMAC 55 select CRYPTO_MD5 56 select CRYPTO_SHA1 57 ---help--- 58 Support for IPsec AH. 59 60 If unsure, say Y. 61 62config INET6_ESP 63 tristate "IPv6: ESP transformation" 64 select XFRM_ALGO 65 select CRYPTO 66 select CRYPTO_AUTHENC 67 select CRYPTO_HMAC 68 select CRYPTO_MD5 69 select CRYPTO_CBC 70 select CRYPTO_SHA1 71 select CRYPTO_DES 72 select CRYPTO_ECHAINIV 73 ---help--- 74 Support for IPsec ESP. 75 76 If unsure, say Y. 77 78config INET6_IPCOMP 79 tristate "IPv6: IPComp transformation" 80 select INET6_XFRM_TUNNEL 81 select XFRM_IPCOMP 82 ---help--- 83 Support for IP Payload Compression Protocol (IPComp) (RFC3173), 84 typically needed for IPsec. 85 86 If unsure, say Y. 87 88config IPV6_MIP6 89 tristate "IPv6: Mobility" 90 select XFRM 91 ---help--- 92 Support for IPv6 Mobility described in RFC 3775. 93 94 If unsure, say N. 95 96config IPV6_ILA 97 tristate "IPv6: Identifier Locator Addressing (ILA)" 98 depends on NETFILTER 99 select LWTUNNEL 100 ---help--- 101 Support for IPv6 Identifier Locator Addressing (ILA). 102 103 ILA is a mechanism to do network virtualization without 104 encapsulation. The basic concept of ILA is that we split an 105 IPv6 address into a 64 bit locator and 64 bit identifier. The 106 identifier is the identity of an entity in communication 107 ("who") and the locator expresses the location of the 108 entity ("where"). 109 110 ILA can be configured using the "encap ila" option with 111 "ip -6 route" command. ILA is described in 112 https://tools.ietf.org/html/draft-herbert-nvo3-ila-00. 113 114 If unsure, say N. 115 116config INET6_XFRM_TUNNEL 117 tristate 118 select INET6_TUNNEL 119 default n 120 121config INET6_TUNNEL 122 tristate 123 default n 124 125config INET6_XFRM_MODE_TRANSPORT 126 tristate "IPv6: IPsec transport mode" 127 default IPV6 128 select XFRM 129 ---help--- 130 Support for IPsec transport mode. 131 132 If unsure, say Y. 133 134config INET6_XFRM_MODE_TUNNEL 135 tristate "IPv6: IPsec tunnel mode" 136 default IPV6 137 select XFRM 138 ---help--- 139 Support for IPsec tunnel mode. 140 141 If unsure, say Y. 142 143config INET6_XFRM_MODE_BEET 144 tristate "IPv6: IPsec BEET mode" 145 default IPV6 146 select XFRM 147 ---help--- 148 Support for IPsec BEET mode. 149 150 If unsure, say Y. 151 152config INET6_XFRM_MODE_ROUTEOPTIMIZATION 153 tristate "IPv6: MIPv6 route optimization mode" 154 select XFRM 155 ---help--- 156 Support for MIPv6 route optimization mode. 157 158config IPV6_VTI 159tristate "Virtual (secure) IPv6: tunneling" 160 select IPV6_TUNNEL 161 select NET_IP_TUNNEL 162 depends on INET6_XFRM_MODE_TUNNEL 163 ---help--- 164 Tunneling means encapsulating data of one protocol type within 165 another protocol and sending it over a channel that understands the 166 encapsulating protocol. This can be used with xfrm mode tunnel to give 167 the notion of a secure tunnel for IPSEC and then use routing protocol 168 on top. 169 170config IPV6_SIT 171 tristate "IPv6: IPv6-in-IPv4 tunnel (SIT driver)" 172 select INET_TUNNEL 173 select NET_IP_TUNNEL 174 select IPV6_NDISC_NODETYPE 175 default y 176 ---help--- 177 Tunneling means encapsulating data of one protocol type within 178 another protocol and sending it over a channel that understands the 179 encapsulating protocol. This driver implements encapsulation of IPv6 180 into IPv4 packets. This is useful if you want to connect two IPv6 181 networks over an IPv4-only path. 182 183 Saying M here will produce a module called sit. If unsure, say Y. 184 185config IPV6_SIT_6RD 186 bool "IPv6: IPv6 Rapid Deployment (6RD)" 187 depends on IPV6_SIT 188 default n 189 ---help--- 190 IPv6 Rapid Deployment (6rd; draft-ietf-softwire-ipv6-6rd) builds upon 191 mechanisms of 6to4 (RFC3056) to enable a service provider to rapidly 192 deploy IPv6 unicast service to IPv4 sites to which it provides 193 customer premise equipment. Like 6to4, it utilizes stateless IPv6 in 194 IPv4 encapsulation in order to transit IPv4-only network 195 infrastructure. Unlike 6to4, a 6rd service provider uses an IPv6 196 prefix of its own in place of the fixed 6to4 prefix. 197 198 With this option enabled, the SIT driver offers 6rd functionality by 199 providing additional ioctl API to configure the IPv6 Prefix for in 200 stead of static 2002::/16 for 6to4. 201 202 If unsure, say N. 203 204config IPV6_NDISC_NODETYPE 205 bool 206 207config IPV6_TUNNEL 208 tristate "IPv6: IP-in-IPv6 tunnel (RFC2473)" 209 select INET6_TUNNEL 210 select DST_CACHE 211 ---help--- 212 Support for IPv6-in-IPv6 and IPv4-in-IPv6 tunnels described in 213 RFC 2473. 214 215 If unsure, say N. 216 217config IPV6_GRE 218 tristate "IPv6: GRE tunnel" 219 select IPV6_TUNNEL 220 select NET_IP_TUNNEL 221 depends on NET_IPGRE_DEMUX 222 ---help--- 223 Tunneling means encapsulating data of one protocol type within 224 another protocol and sending it over a channel that understands the 225 encapsulating protocol. This particular tunneling driver implements 226 GRE (Generic Routing Encapsulation) and at this time allows 227 encapsulating of IPv4 or IPv6 over existing IPv6 infrastructure. 228 This driver is useful if the other endpoint is a Cisco router: Cisco 229 likes GRE much better than the other Linux tunneling driver ("IP 230 tunneling" above). In addition, GRE allows multicast redistribution 231 through the tunnel. 232 233 Saying M here will produce a module called ip6_gre. If unsure, say N. 234 235config IPV6_FOU 236 tristate 237 default NET_FOU && IPV6 238 239config IPV6_FOU_TUNNEL 240 tristate 241 default NET_FOU_IP_TUNNELS && IPV6_FOU 242 select IPV6_TUNNEL 243 244config IPV6_MULTIPLE_TABLES 245 bool "IPv6: Multiple Routing Tables" 246 select FIB_RULES 247 ---help--- 248 Support multiple routing tables. 249 250config IPV6_SUBTREES 251 bool "IPv6: source address based routing" 252 depends on IPV6_MULTIPLE_TABLES 253 ---help--- 254 Enable routing by source address or prefix. 255 256 The destination address is still the primary routing key, so mixing 257 normal and source prefix specific routes in the same routing table 258 may sometimes lead to unintended routing behavior. This can be 259 avoided by defining different routing tables for the normal and 260 source prefix specific routes. 261 262 If unsure, say N. 263 264config IPV6_MROUTE 265 bool "IPv6: multicast routing" 266 depends on IPV6 267 ---help--- 268 Experimental support for IPv6 multicast forwarding. 269 If unsure, say N. 270 271config IPV6_MROUTE_MULTIPLE_TABLES 272 bool "IPv6: multicast policy routing" 273 depends on IPV6_MROUTE 274 select FIB_RULES 275 help 276 Normally, a multicast router runs a userspace daemon and decides 277 what to do with a multicast packet based on the source and 278 destination addresses. If you say Y here, the multicast router 279 will also be able to take interfaces and packet marks into 280 account and run multiple instances of userspace daemons 281 simultaneously, each one handling a single table. 282 283 If unsure, say N. 284 285config IPV6_PIMSM_V2 286 bool "IPv6: PIM-SM version 2 support" 287 depends on IPV6_MROUTE 288 ---help--- 289 Support for IPv6 PIM multicast routing protocol PIM-SMv2. 290 If unsure, say N. 291 292endif # IPV6 293