IKEv2 mobike initiator support. north is the initiator and migrates sa. North has two IP addresses when it start. One of them is removed, after IPsec connection is established. Pluto will detect this and, find a second adddress, send MOBIKE probe, when response arrive migrate the SA. limitations to keep in mind: Initiator and Responder: NAT support need Linux Kernel 4.13 or xfrm migration patches from it. CONFIG_XFRM_MIGRATE=y should be enabled in the kernel We explicitely avoid testing aes_gcm for esp since there is a known linux bug in v4.14 that forgets to copy some of the AEAD key material in XFRM_MIGRATE. That is tested in ikev2-mobike-05-gcm Initiator: On the initiator "that" 0.0.0.0/0 with IKEv2 CP may not work. server assigned address can't be used to rech "that". Moving betwween WiFi networks, the Network Manager may remove the CP address. (but we try to mark it with scope 50 on loopback so it won't be removed)