Re: [dhcwg] DUID+IAID

Jeffrey Hutzelman <jhutz@cmu.edu> Fri, 30 March 2012 16:39 UTC

Return-Path: <jhutz@cmu.edu>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4721B21F864B for <dhcwg@ietfa.amsl.com>; Fri, 30 Mar 2012 09:39:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.299
X-Spam-Level:
X-Spam-Status: No, score=-106.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_44=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rHYBQB028QB4 for <dhcwg@ietfa.amsl.com>; Fri, 30 Mar 2012 09:39:04 -0700 (PDT)
Received: from smtp02.srv.cs.cmu.edu (SMTP02.SRV.CS.CMU.EDU [128.2.217.197]) by ietfa.amsl.com (Postfix) with ESMTP id A853721F8645 for <dhcwg@ietf.org>; Fri, 30 Mar 2012 09:39:04 -0700 (PDT)
Received: from [192.168.33.144] (c-67-165-85-247.hsd1.pa.comcast.net [67.165.85.247]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id q2UGd10O018935 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 30 Mar 2012 12:39:02 -0400 (EDT)
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: Ted Lemon <Ted.Lemon@nominum.com>
In-Reply-To: <25900_1333088587_q2U6N6Ed025358_8D23D4052ABE7A4490E77B1A012B6307472D46D5@mbx-01.win.nominum.com>
References: <CAAed6vtfuig6Y1Zqqxd=rQc7MarO7vfkYVDG0HbzeaQrx7GcYw@mail.gmail.com> <8D23D4052ABE7A4490E77B1A012B6307472D4438@mbx-01.win.nominum.com> <CAAed6vsga7nimW-uA00nStj-sEJ2g9kUbT1=eR1qgxBesczOow@mail.gmail.com> <8D23D4052ABE7A4490E77B1A012B6307472D462B@mbx-01.win.nominum.com> , <CAAed6vsuc5AoJ-pmdu-CYLzJ4jEtSUkxYy1aLTJbkoRiEjUQ9A@mail.gmail.com> <25900_1333088587_q2U6N6Ed025358_8D23D4052ABE7A4490E77B1A012B6307472D46D5@mbx-01.win.nominum.com>
Content-Type: text/plain; charset="UTF-8"
Date: Fri, 30 Mar 2012 12:39:01 -0400
Message-ID: <1333125541.12176.49.camel@destiny.pc.cs.cmu.edu>
Mime-Version: 1.0
X-Mailer: Evolution 2.30.3
Content-Transfer-Encoding: 7bit
X-Scanned-By: mimedefang-cmuscs on 128.2.217.197
Cc: "dhcwg@ietf.org" <dhcwg@ietf.org>, jhutz@cmu.edu
Subject: Re: [dhcwg] DUID+IAID
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Mar 2012 16:39:05 -0000

On Fri, 2012-03-30 at 06:22 +0000, Ted Lemon wrote:
> > I am not sure I understand that.  Why would the proposed hardware-addr-option
> > not identify the interface?
> 
> Because it is not an identifier.   It is a hint.   If you call it an
>  identifier, someone will start using it as one.

It is an identifier, or at least the IEEE tries fairly hard to make it
one.  It's just not an identifier that's guaranteed to be bound to
anything useful to DHCP, and especially not to the client as a whole.

Note that one reason you can't use a MAC address as an identifier _at
the protocol layer_ is because some clients will end up using the same
MAC address on multiple interfaces.  For example, until only a few years
ago, Sun boxes had a single MAC address for the entire machine, and used
that address for every interface.


> > My understanding of the proposal is that the MAC address is *added* to the request
> > as an option, so we would have both the DUID and the MAC, thus allowing us to
> > identify both the device and the interface, which is good IMO.
> 
> In principle there's nothing incorrect about this statement, but in
>  practice there is no protocol need to identify the interface.

True -- the _protocol_ has no such need.  But that doesn't change
whether the hardware address is in fact an identifier.



More importantly, the question of whether this is an "identifier" or not
is a pointless distraction from the original question, which was about
_which interface's_ hardware address the option is expected to contain.

> It's possible that you might want to use DHCP to allocate an address
>  for a tunnel endpoint, but in that case there is no physical
>  interface, and the MAC address that the relay agent will add to the
>  packet will be the address of the physical interface, not the tunnel,
>  which has no MAC address.   So this is another reason not to call this
>  an "interface identifier."   It's the MAC address of the interface out
>  which the DHCP packet was sent.


In fact, it sounds like it's exactly the source MAC address of the
packet as it was received by the relay agent.