Re: [dhcwg] Questions regarding draft-ietf-dhc-mac-assign and draft-ietf-dhc-slap-quadrant

"Bernie Volz (volz)" <volz@cisco.com> Fri, 13 March 2020 16:47 UTC

Return-Path: <volz@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55B7F3A0E56; Fri, 13 Mar 2020 09:47:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level:
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=b5aAfzE7; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=h19tr57M
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lMgnZuonHf8m; Fri, 13 Mar 2020 09:47:35 -0700 (PDT)
Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF6583A0D07; Fri, 13 Mar 2020 09:47:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4694; q=dns/txt; s=iport; t=1584118055; x=1585327655; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=fT3NO/hJg7fFUcO0bnM81u3fxOc0KbpdvzzBRuln/w0=; b=b5aAfzE7LvLh+c4cbHik+QyG6JDsOjtLCBB5OqlKBsfShe2MUQ9YaP+n NNl40ukVDc318hkKdorKzwLzDI/koyIEI8/FJ+PlM4RVYj1ctlkQ7B8Bs LpIwzWzCQ8cvS8cBbDkNfD0nDhz6m4Ih4zxygMbOczOpcf+Z1YAVze9st Q=;
IronPort-PHdr: 9a23:o89xGxS64InTUmkd4QrVnjztOtpsv++ubAcI9poqja5Pea2//pPkeVbS/uhpkESUANfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH15NksAKh0olCc+BB1f8Kav0aCgoNM9DT1RiuXq8NBsdFQ==
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CwAABauGte/5JdJa1mGgEBAQEBAQEBAQMBAQEBEQEBAQICAQEBAYF7gVQpJwWBRCAECyoKhAuDRQOKcIJfmBiCUgNUCQEBAQwBAS0CBAEBhEMCF4IGJDgTAgMBAQsBAQUBAQECAQUEbYVWDIVjAQEBAQMSEREMAQE3AQsEAgEIEQQBAQMCJgICAjAVCAgCBAENBQgahU8DLgGhZwKBOYhidYEygn8BAQWFLhiCDAmBDiqMLhqCAIEQAUeCTT6CG4IYGhUPgmsygiyQb59OCoI8iTeHKIYtgkqYd48Cm1sCBAIEBQIOAQEFgWkiKoEucBWDJ1AYDY4dOG8BCYJCilV0gSmKZiyBBwGBDwEB
X-IronPort-AV: E=Sophos;i="5.70,549,1574121600"; d="scan'208";a="446822231"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 13 Mar 2020 16:47:34 +0000
Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 02DGlYi9030810 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 13 Mar 2020 16:47:34 GMT
Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 13 Mar 2020 11:47:34 -0500
Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 13 Mar 2020 11:47:33 -0500
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 13 Mar 2020 11:47:33 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=frlv9iyOzi4cRcn0eF+SzkUgKT69Bv4TVkDjmK12IVZgvO19kx1MOIFbJmlDpMK77H4ZrLT/UMVZpIMFodrW+vgKjumHe5GWhvilVWqv1iqSgtXEJjxJeNgamwDILQ3gTOeDkrYhgyJHZT9d0NjEmcwdCqbIEOxI7ju0IbCUbYwC7xrsHdB6cS7wXtMFrWrs3lkaMg9E08AbzFhIn892SQ5KSUkEXkpBY1cOvZIqQqonOnvH7n0g82Sa9hQkx6ltwSqRaco0bvpGRywFr4v9MZPBaA4eFMM5f2VBdU8oOfvlmMmHEL+IgD5ZQ12P1gQGPQtTCTHIIg1aH6lXTBv82Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=fT3NO/hJg7fFUcO0bnM81u3fxOc0KbpdvzzBRuln/w0=; b=f7wsxcj9xvQdh9Gkdm3g14RrzCcs+JxZZd5h2qoQ70ycOaI7tQhLq/v5mCvJ7iVvBWNpOIbBECRruswOstI/znzVd5bO3/+qNZtYB/S/xvWRMrpmqkMPXIDUIz3uggwT7PcXbZBjHe38nQUdU5ni7ZSxlYLEKqsbNMey26VSy+6VLu/I0qnayVngPllKOjKEI0tVHmp69kPXR+djK4H8whaqLiRYCIyKkfNzrFcGQYH4G8Yk2AnmKOhy14EqKExtg8LbDGVwr8PS1IHYhsO5byAdYnKOwER4l22o7Q5rTMrDZiuyDN/XSwqontV1zXpr4Iv02HANrCiIgmc3bm5ehQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fT3NO/hJg7fFUcO0bnM81u3fxOc0KbpdvzzBRuln/w0=; b=h19tr57Mq5cxGK3tHWsfhWxtFE42MEK5Su1bITvisc7gK55W2Itl1x0U/T3zZZA3sqeXM0ZdVFu5lSQ9UGMFtkOoiOEQdxsws+zxsuvYN9GOHPmmA4pr+Pr+G0OnTDdSz+Hg5yAJGg070g/OWCLl/yZPMLL7W/qPpUfZRwWxYMY=
Received: from BN7PR11MB2547.namprd11.prod.outlook.com (2603:10b6:406:af::18) by BN7PR11MB2643.namprd11.prod.outlook.com (2603:10b6:406:b2::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.14; Fri, 13 Mar 2020 16:47:31 +0000
Received: from BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::2d8b:4fd5:9d28:a1c7]) by BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::2d8b:4fd5:9d28:a1c7%6]) with mapi id 15.20.2793.021; Fri, 13 Mar 2020 16:47:31 +0000
From: "Bernie Volz (volz)" <volz@cisco.com>
To: "ianfarrer@gmx.com" <ianfarrer@gmx.com>, "draft-ietf-dhc-mac-assign@ietf.org" <draft-ietf-dhc-mac-assign@ietf.org>
CC: dhcwg <dhcwg@ietf.org>
Thread-Topic: Questions regarding draft-ietf-dhc-mac-assign and draft-ietf-dhc-slap-quadrant
Thread-Index: AQHV+U7lyOd59Hq/zUGBnnpUc0hbcKhGtJrQ
Date: Fri, 13 Mar 2020 16:47:31 +0000
Message-ID: <BN7PR11MB2547CCD3AD7EA2EA452FE1EECFFA0@BN7PR11MB2547.namprd11.prod.outlook.com>
References: <8856B8DA-779C-4AB2-AC35-05BCB3169928@gmx.com>
In-Reply-To: <8856B8DA-779C-4AB2-AC35-05BCB3169928@gmx.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=volz@cisco.com;
x-originating-ip: [173.38.117.66]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4bee1c43-6e8b-4e2d-8bfb-08d7c76e394c
x-ms-traffictypediagnostic: BN7PR11MB2643:
x-microsoft-antispam-prvs: <BN7PR11MB264373620C1EBA45C2023EADCFFA0@BN7PR11MB2643.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 034119E4F6
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(376002)(136003)(396003)(39860400002)(366004)(199004)(64756008)(6506007)(33656002)(53546011)(186003)(8936002)(478600001)(8676002)(4326008)(26005)(81156014)(81166006)(71200400001)(7696005)(66476007)(86362001)(316002)(66556008)(9686003)(110136005)(66446008)(66946007)(5660300002)(55016002)(2906002)(52536014)(76116006)(518174003); DIR:OUT; SFP:1101; SCL:1; SRVR:BN7PR11MB2643; H:BN7PR11MB2547.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 78cIvtnpC6yFjFk4cn72RA3qaaD4yHnovgkR+CsL3MfhNLHae2RrlqpUbPOXW5nPQce9SaQOVtRsv1l1tghcUf/fkj4TpGKBrHohkrpaugJyGZei/JVhaLlKar6yFSP2At6y6YkqXGhve+o5Px+N4mpOvvkISH1MmBlR67xt0DY1A/DCMnIABh2kcax+rsj28GQFkLC7dKg8+T46KdZuvT3h002oyqs/79jPnZow9pOfR4vE5DvMv5Jt5zGPzNaeCl3+FtFLvRbdMkq6CXSmQWulUo9etLQDr42IVafZzCsqItIn7RRodEiVS77rrZuV2lhiB+eTjFBdPRgOZy4tQTSX/uNxRkeodX2fUlkVrLIOr3843dkU17KpugcwG0GKHGUHuCTX9RvK3QhEfWx7LrgkSmoH9m1P9I9IYeiIyrvPdA6ptORdgosJrFVTu3XrJoskSWfJbfZkonODHkb+Y/2dM4j2co17bZAwklXb9NXQSgfMG4Jji3WL6GRdmwrK
x-ms-exchange-antispam-messagedata: sArlcuoxqmeZlHOl/Ruryn9r+nUUi2Rx3saynAHbllOfb4Y7QeQV8FvvEEi13L/Pr2oAzBZDf1Jehg+5bUsuPB5pIOF7wyR0qk5zDIjApg0NgTMu8kmxCc1A0le3JFtiKcTl5jcryneIkmr3UpCeFA==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 4bee1c43-6e8b-4e2d-8bfb-08d7c76e394c
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Mar 2020 16:47:31.5753 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Mu5axMy7eEfDW9ro2BHROPS8EDFQ68SnNS0VhTCjbAWneDeUV55rW1yGBx5bJDol
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR11MB2643
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com
X-Outbound-Node: rcdn-core-10.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/7jIJzMfO8OVGyf_PLmG_ykI3l7E>
Subject: Re: [dhcwg] Questions regarding draft-ietf-dhc-mac-assign and draft-ietf-dhc-slap-quadrant
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2020 16:47:37 -0000

Hi Ian:

See inline below (BV>).

- Bernie

-----Original Message-----
From: ianfarrer@gmx.com <ianfarrer@gmx.com> 
Sent: Friday, March 13, 2020 11:48 AM
To: draft-ietf-dhc-mac-assign@ietf.org
Cc: dhcwg <dhcwg@ietf.org>
Subject: Questions regarding draft-ietf-dhc-mac-assign and draft-ietf-dhc-slap-quadrant

Hi,

This question has come up in the review of draft-ieft-dhc-slap-quadrant, but I’ll raise it here as I think it’s relevant to both drafts, and the expected behaviour is not mentioned anywhere:

If a client request for an IA_LL is unsuccessful, what is the expected behaviour? Does it just continue using its existing L2 address, and configure whatever L3 addresses it has received, or should it keep retrying until it gets a response to the IA_LL?

BV> This is really up to the client. I think the specification should be silent on this issue. This also goes back to what Advertisement's the client will "accept". I suspect that early clients that use this capability will likely continue with their temporary assignment as it may be that no server is available yet that supports this feature? In other cases, there may be new classes of devices that will only accept Advisements that include the requested assignment(s).

----

For draft-ietf-dhc-mac-assign, another point that isn’t mentioned is the configuration of a new L2 address received in an IA_LL in regards to L3 addressing through SLAAC, IA_NA, link local, etc. E.g.: 

* While the client is attempting DHCP configuration, it may also be doing SLAAC. If this is successful, then it may have already responded to other hosts ND requests with its temporary MAC address.

* If the client gets an IA_NA alongside the IA_LL and configures it before the IA_LL, the same could happen.

In both cases, the newly configured L2 address will result in other hosts existing ND entries being invalid as soon as an IA_LL is received and configured on the interfaces.

I think this be fixed by adding the requirement that, when a new L2 address (or block)  is received, the client sends out an unsolicited neighbor advertisement as per RFC4861 sec 7.6.2 for every address configured on an interface which the new L2 address is being configured.

BV> Yes, this is would be expected. I think this was just assumed to be standard practice whenever changing mac-addresses. (The section is 7.2.6 - typo above). The text in that document already makes it clear that this is expected behavior:

7.2.6.  Sending Unsolicited Neighbor Advertisements

   In some cases, a node may be able to determine that its link-layer
   address has changed (e.g., hot-swap of an interface card) and may
   wish to inform its neighbors of the new link-layer address quickly.
   In such cases, a node MAY send up to MAX_NEIGHBOR_ADVERTISEMENT
   unsolicited Neighbor Advertisement messages to the all-nodes
   multicast address.  These advertisements MUST be separated by at
   least RetransTimer seconds.

BV> Certainly when the node changes it address, it would be able to determine this? But, I guess adding a reminder for client implementers cannot hurt. How about adding to the end of Section 7 of mac-assign:

   A client that changes its link-layer address on an interface SHOULD
   follow the recommendations in Section 7.2.6 of [RFC4861] to inform
   its neighbors of the new link-layer address quickly.



Thanks,
Ian