Re: [dhcwg] DUID+IAID

Ted Lemon <Ted.Lemon@nominum.com> Thu, 29 March 2012 21:52 UTC

Return-Path: <Ted.Lemon@nominum.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78CB821F8732 for <dhcwg@ietfa.amsl.com>; Thu, 29 Mar 2012 14:52:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.194
X-Spam-Level:
X-Spam-Status: No, score=-106.194 tagged_above=-999 required=5 tests=[AWL=-0.195, BAYES_00=-2.599, J_CHICKENPOX_44=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zb+wQiPLGR90 for <dhcwg@ietfa.amsl.com>; Thu, 29 Mar 2012 14:52:50 -0700 (PDT)
Received: from exprod7og113.obsmtp.com (exprod7og113.obsmtp.com [64.18.2.179]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4F721F850D for <dhcwg@ietf.org>; Thu, 29 Mar 2012 14:52:50 -0700 (PDT)
Received: from shell-too.nominum.com ([64.89.228.229]) (using TLSv1) by exprod7ob113.postini.com ([64.18.6.12]) with SMTP ID DSNKT3TZsaGLXMxmVY75BQPE3ElbJ46R5onK@postini.com; Thu, 29 Mar 2012 14:52:50 PDT
Received: from archivist.nominum.com (archivist.nominum.com [64.89.228.108]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by shell-too.nominum.com (Postfix) with ESMTP id 33C4C1B8131 for <dhcwg@ietf.org>; Thu, 29 Mar 2012 14:52:49 -0700 (PDT)
Received: from webmail.nominum.com (cas-02.win.nominum.com [64.89.228.132]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certification Authority" (verified OK)) by archivist.nominum.com (Postfix) with ESMTPS id 2C334190061; Thu, 29 Mar 2012 14:52:49 -0700 (PDT) (envelope-from Ted.Lemon@nominum.com)
Received: from MBX-01.WIN.NOMINUM.COM ([64.89.228.133]) by CAS-02.WIN.NOMINUM.COM ([64.89.228.132]) with mapi id 14.02.0247.003; Thu, 29 Mar 2012 14:52:49 -0700
From: Ted Lemon <Ted.Lemon@nominum.com>
To: "A. Gregory Rabil" <greg.rabil@jagornet.com>, "dhcwg@ietf.org" <dhcwg@ietf.org>
Thread-Topic: [dhcwg] DUID+IAID
Thread-Index: AQHNDbbP4FgtkXLiwESgwgUDJGkpD5aBV/GogACefoD//9jW1g==
Date: Thu, 29 Mar 2012 21:52:49 +0000
Message-ID: <8D23D4052ABE7A4490E77B1A012B6307472D462B@mbx-01.win.nominum.com>
References: <CAAed6vtfuig6Y1Zqqxd=rQc7MarO7vfkYVDG0HbzeaQrx7GcYw@mail.gmail.com> <8D23D4052ABE7A4490E77B1A012B6307472D4438@mbx-01.win.nominum.com>, <CAAed6vsga7nimW-uA00nStj-sEJ2g9kUbT1=eR1qgxBesczOow@mail.gmail.com>
In-Reply-To: <CAAed6vsga7nimW-uA00nStj-sEJ2g9kUbT1=eR1qgxBesczOow@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.1.10]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [dhcwg] DUID+IAID
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Mar 2012 21:52:53 -0000

> So, would the hardware-addr-option (or link-layer option) identify the MAC
> of the interface on which the request was sent, or the MAC of the interface
> "for which configuration information is being requested"?

In practice there's no difference.   But it doesn't identify the interface.  It provides additional information about the interface that can be used as a database key to associate devices to the DUID.   A back-end database initialized by scanning the box a router came in might have four entries for the four hardware addresses of that router.   When a request comes in from that router, the database entry for each hardware address could be updated to refer to the same DUID.   In this way we can tie an existing hardware address-based back-end database to DUID.   That's the point of the exercise.

> Also, I recall a thread on the mailing list that discussed CPE routers which may
> request an address for the WAN-side interface via an IA_NA option along with an
> IA_PD request for the LAN-side interface.  I believe the discussion was focused on
> the renew behavior.  However, IIRC, some implementations may send the IA_NA
> and IA_PD in the same or separate requests.  Regardless of one or two requests
> the packets would (presumably) be sent over the WAN-side interface.  In the
> situation where the client sends the IA_NA and IA_PD in the same request packet,
> the proposed link-layer address option would be the MAC of which interface -
> WAN or LAN?  In the case of separate requests, would you then expect two
> different MACs?  I think were I'm heading with this is that perhaps the link-layer
> option needs to be "inside" the IA option, not at the outermost message level of the packet.

The problem we are trying to solve is twofold.   First, tying the mac address on a shipping box to a device making a query on the network using DUID.   Second, tying the chaddr field from a DHCPv4 message to the DUID of a DHCPv6 message.   So consider the CPE router--it's sending its DHCPv4 packet on the upstream interface, and it's sending its DHCPv6 packet on the upstream interface.   In both cases, the hardware address we want to send is the hardware address of the upstream interface.   It makes no sense to send the hardware address of any of the downstream interfaces.