IkeSessionParams.IkeOptionMobike Field

Definition

Caution

This constant will be removed in the future version. Use Android.Net.IpSec.Ike.IkeSessionOption enum directly instead of this field.

If set, the IKE Session will attempt to handle IP address changes using RFC4555 MOBIKE.

[Android.Runtime.Register("IKE_OPTION_MOBIKE", ApiSince=31)]
[System.Obsolete("This constant will be removed in the future version. Use Android.Net.IpSec.Ike.IkeSessionOption enum directly instead of this field.", true)]
public const Android.Net.IpSec.Ike.IkeSessionOption IkeOptionMobike = 2;
[<Android.Runtime.Register("IKE_OPTION_MOBIKE", ApiSince=31)>]
[<System.Obsolete("This constant will be removed in the future version. Use Android.Net.IpSec.Ike.IkeSessionOption enum directly instead of this field.", true)>]
val mutable IkeOptionMobike : Android.Net.IpSec.Ike.IkeSessionOption

Field Value

Value = 2
Attributes

Remarks

If set, the IKE Session will attempt to handle IP address changes using RFC4555 MOBIKE.

Upon IP address changes (including Network changes), the IKE session will initiate an RFC 4555 MOBIKE procedure, migrating both this IKE Session and associated IPsec Transforms to the new local and remote address pair.

The IKE library will first attempt to enable MOBIKE to handle the changes of underlying network and addresses. For callers targeting SDK android.os.Build.VERSION_CODES#S_V2 and earlier, this option will implicitly enable the support for rekey-based mobility, and thus if the server does not support MOBIKE, the IKE Session will try migration by rekeying all associated IPsec SAs. This rekey-based mobility feature is not best-practice and has technical issues; accordingly, it will no longer be enabled for callers targeting SDK android.os.Build.VERSION_CODES#TIRAMISU and above.

Checking whether or not MOBIKE is supported by both the IKE library and the server in an IKE Session is done via IkeSessionConfiguration#isIkeExtensionEnabled(int).

It is recommended that IKE_OPTION_MOBIKE be enabled unless precluded for compatibility reasons.

If this option is set for an IKE Session, Transport-mode SAs will not be allowed in that Session.

Callers that need to perform migration of IPsec transforms and tunnels MUST implement migration specific methods in IkeSessionCallback and ChildSessionCallback.

Java documentation for android.net.ipsec.ike.IkeSessionParams.IKE_OPTION_MOBIKE.

Portions of this page are modifications based on work created and shared by the Android Open Source Project and used according to terms described in the Creative Commons 2.5 Attribution License.

Applies to