Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt

Tim Chown <tjc@ecs.soton.ac.uk> Mon, 16 July 2012 13:23 UTC

Return-Path: <tjc@ecs.soton.ac.uk>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74A9921F87B2 for <dhcwg@ietfa.amsl.com>; Mon, 16 Jul 2012 06:23:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.726
X-Spam-Level:
X-Spam-Status: No, score=-1.726 tagged_above=-999 required=5 tests=[AWL=-0.524, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SuYh5P4p1dKc for <dhcwg@ietfa.amsl.com>; Mon, 16 Jul 2012 06:23:40 -0700 (PDT)
Received: from falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [IPv6:2001:630:d0:f102::25e]) by ietfa.amsl.com (Postfix) with ESMTP id B211321F878E for <dhcwg@ietf.org>; Mon, 16 Jul 2012 06:23:39 -0700 (PDT)
Received: from falcon.ecs.soton.ac.uk (localhost.ecs.soton.ac.uk [127.0.0.1]) by falcon.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id q6GDOG60021203 for <dhcwg@ietf.org>; Mon, 16 Jul 2012 14:24:16 +0100
X-DKIM: Sendmail DKIM Filter v2.8.2 falcon.ecs.soton.ac.uk q6GDOG60021203
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=ecs.soton.ac.uk; s=200903; t=1342445057; bh=n9ZYXuMvMRK7RpHqj4y8+M16gIA=; h=From:Mime-Version:Subject:Date:In-Reply-To:To:References; b=gBQAQ0CIlpj7vjCQc/dWeJqXsbC6C6agfDJkNqCIOPHoznuKIVGmBIJ6HgPIZN5/t lEPF7p+U5pqilCj0oQx3jtxk/rC+zO/RWPkOHGZsqW3WMu2RUi07ZNCSQyW4paomP/ BFjuitOS3Jk+0MyUaLct4dDMxbI1m+HvvwhH9xnY=
Received: from gander.ecs.soton.ac.uk (gander.ecs.soton.ac.uk [2001:630:d0:f102::25d]) by falcon.ecs.soton.ac.uk (falcon.ecs.soton.ac.uk [2001:630:d0:f102::25e]) envelope-from <tjc@ecs.soton.ac.uk> with ESMTP (valid=N/A) id o6FEOG0430617100kU ret-id none; Mon, 16 Jul 2012 14:24:16 +0100
Received: from ip-205-203.eduroam.soton.ac.uk (ip-205-203.eduroam.soton.ac.uk [152.78.205.203]) (authenticated bits=0) by gander.ecs.soton.ac.uk (8.13.8/8.13.8) with ESMTP id q6GDOEZb023505 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <dhcwg@ietf.org>; Mon, 16 Jul 2012 14:24:14 +0100
From: Tim Chown <tjc@ecs.soton.ac.uk>
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: multipart/alternative; boundary="Apple-Mail=_2B3BB76A-D667-4950-BFAA-C93D083A1E5D"
Date: Mon, 16 Jul 2012 14:24:13 +0100
In-Reply-To: <CC2589A3.ADDF%G.Eustace@massey.ac.nz>
To: dhcwg@ietf.org
References: <CC2589A3.ADDF%G.Eustace@massey.ac.nz> <229DF3CC-E508-4B92-B9F7-EB6D7EA38671@ecs.soton.ac.uk>
Message-ID: <EMEW3|dc530d6d08f0019fc7232c7aa501db49o6FEOG03tjc|ecs.soton.ac.uk|229DF3CC-E508-4B92-B9F7-EB6D7EA38671@ecs.soton.ac.uk>
X-Mailer: Apple Mail (2.1278)
X-ECS-MailScanner: Found to be clean, Found to be clean
X-smtpf-Report: sid=o6FEOG043061710000; tid=o6FEOG0430617100kU; client=relay,ipv6; mail=; rcpt=; nrcpt=1:0; fails=0
X-ECS-MailScanner-Information: Please contact the ISP for more information
X-ECS-MailScanner-ID: q6GDOG60021203
X-ECS-MailScanner-From: tjc@ecs.soton.ac.uk
Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 13:23:41 -0000

Hi Glen,

Does that mean all your devices/OSes are by default using DUID-LL?  The spec says that the client must use *a* MAC address; it may not happen to pick the one corresponding to the interface that the query comes from. 

It would be very interesting to see other enterprises who are using DHCPv6 reporting what they see. And interesting to also note how often observed DUIDs change over time, e.g. from dual-boot systems.

The relay function seems useful to me. In a typical campus environment that we'd be interested in, all requests would be forwarded by a relay, thus client support would not be essential in our environment.

It would seem very likely the proposed draft would be used by some enterprise admins to try to perform the same type of "accountability" that exists for DHCPv4 with DHCPv6.  That's a question that frequently crops up from new sites considering IPv6 deployment.

Tim

On 12 Jul 2012, at 21:23, Eustace, Glen wrote:

> As one of these IT departments, I thought that some empirical data might be useful.
> 
> We have now got ISC dhcpd running on our main campus and I have just completed adding native IPv6 to the majority of networks.  We do NOT yet have DUIDs stored in our databases but do have the MAC address for the primary NIC for all University owned equipment.
> 
> I have the  hardware-ethernet included in each host declaration for both IPv4 and IPv6.  Using the ISC fudge of deconstructing the type 1 DUID, we have 1224 matches out of 1693 active leases.  Whilst not perfect, it is actually better than I expected and for us does add value.
> 
> I have not yet attempted to determine why we failed to match the remaining leases, could be a number of reasons
> Private equipment for which we do not have a MAC in the DB
> The DUID generated used a MAC we don't have in the DB
> The MAC we have is wrong.
> etc
> -- 
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Glen Eustace, Infrastructure Development Engineer (BC/DR)
> Information Technology Service, Massey University PN460
> Tennent Drive, Palmerston North, New Zealand
> Ph: +64-6-3569099 x 81005, Fax: +64-6-3505607, Mob: +64-27-4500321
> 
> From: "Ted com>" <Ted.Lemon@nominum.com>
> Date: Thu, 12 Jul 2012 19:49:59 +0000
> To: Andre Kostur <akostur@incognito.com>
> Cc: "<dhcwg@ietf.org>" <dhcwg@ietf.org>, Marc Perea <marccp@srttel.com>
> Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt
> 
> On Jul 12, 2012, at 3:40 PM, Andre Kostur wrote:
>> Ok, if we're restricting to ISP environments, why not mandate in such
>> environments that they should be using the Remote ID (RFC 4649) to
>> specify the downstream "client".  Note that in DOCSIS environments,
>> this is already happening.  (Just not in RFC 4649 form... but in an
>> enterprise-specific option 17).
> 
> It's my understanding that the main motivator for this draft is use in corporate IT departments that inventory machines by MAC address.   I guess it would also be useful for ISPs, but that's certainly not the use case that I've heard mentioned most.
> 
> _______________________________________________ dhcwg mailing list dhcwg@ietf.org https://www.ietf.org/mailman/listinfo/dhcwg
> _______________________________________________
> dhcwg mailing list
> dhcwg@ietf.org
> https://www.ietf.org/mailman/listinfo/dhcwg