Re: [coman] Device Classes?

Hannes Tschofenig <hannes.tschofenig@gmx.net> Fri, 04 April 2014 12:14 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: coman@ietfa.amsl.com
Delivered-To: coman@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BA981A0037 for <coman@ietfa.amsl.com>; Fri, 4 Apr 2014 05:14:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1mjxYZjio01I for <coman@ietfa.amsl.com>; Fri, 4 Apr 2014 05:14:13 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) by ietfa.amsl.com (Postfix) with ESMTP id 47FC01A0150 for <coman@ietf.org>; Fri, 4 Apr 2014 05:14:13 -0700 (PDT)
Received: from [192.168.131.138] ([80.92.119.215]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MGjL7-1WJ6is21oX-00DULf; Fri, 04 Apr 2014 14:14:07 +0200
Message-ID: <533E9B6B.1080602@gmx.net>
Date: Fri, 04 Apr 2014 13:45:47 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Carsten Bormann <cabo@tzi.org>
References: <533BBFB7.2000100@gmx.net> <893C4FAC-437D-4140-9832-A9ABA2D1518A@tzi.org> <533E75A9.5080003@gmx.net> <8D653B3C-E678-4A66-9798-978950977694@tzi.org> <533E9864.4060806@gmx.net> <EBDEF2B4-32C3-4B41-9CAF-C1A836CC6D7B@tzi.org>
In-Reply-To: <EBDEF2B4-32C3-4B41-9CAF-C1A836CC6D7B@tzi.org>
X-Enigmail-Version: 1.5.2
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="7fKAlivN7n0LVR3IGprn3lPBiHxBQCS5C"
X-Provags-ID: V03:K0:g2T+Zct0AIyycgd+dd4tarIBmRZ8Lgi3fpXPoyo6jzns0VEPP68 RDL0ykU8g/LZYlYWvrJR9FzGIuTF2xheZoZYxIbvqKzHkyoLI3C4hCeAxb74bdAvJ+tsYxU UGR35lmop/lDPkM0fzlrzPQjp1UKijmMbj0tIRFDF6tTBPdNkKL6/umMaH8Wy+cY67O2oI0 ufRhJmpF2aoKWBDNcBzCg==
Archived-At: http://mailarchive.ietf.org/arch/msg/coman/Yn3cHoR4a-Q5qXkTqTruFEsfq8M
Cc: "coman@ietf.org" <coman@ietf.org>
Subject: Re: [coman] Device Classes?
X-BeenThere: coman@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Management of Constrained Networks and Devices <coman.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/coman>, <mailto:coman-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/coman/>
List-Post: <mailto:coman@ietf.org>
List-Help: <mailto:coman-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/coman>, <mailto:coman-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Apr 2014 12:14:18 -0000

Hi Carsten.


On 04/04/2014 02:08 PM, Carsten Bormann wrote:
> On 04 Apr 2014, at 13:32, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
> 
>> For me the software update mechanism is extremely important since it is
>> not just a way to replace the entire firmware but also to provision
>> certain protocol parameters.
> 
> Provisioning protocol parameters is one CoAP PUT to the right resource.  Cf. OMA LWM2M.
> (They also do define a firmware update mechanism, but that seems to presume the device has space for a complete firmware image.)

That is exactly the question I raised when it comes to network management.

I don't understand what network management protocol add beyond what is
already there with CoAP.

Of course, you could replace CoAP entirely with SNMP (as Juergen had
suggested).


> 
> Replacing the software that is running during the software update is the fun part, and that is somewhat expensive to support (add the requirement for a rollback capability for a realistic scenario).
> 
Sure. Software updates are not fun.

>> You also cannot omit EAP/PANA from that list since many devices will
>> likely need to have a way to authenticate to the network.
> 
> If you want to do this the SEP2.0 way, you need EAP/PANA.
> (SEP2.0 is targeting class-2+, not class-1.)

With devices that are in direct connection with each other you could
argue that there is no need for DTLS and alike since you will have to
deal with the pairing procedure at the lower layer. Many devices fall
into that category.

If that's not the case I believe you cannot assume that no network
access authentication will be needed.

Ciao
Hannes


> 
> Grüße, Carsten
>