Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt

"Bernie Volz (volz)" <volz@cisco.com> Fri, 13 July 2012 19:48 UTC

Return-Path: <volz@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEE6E21F8577 for <dhcwg@ietfa.amsl.com>; Fri, 13 Jul 2012 12:48:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ljSdo7jw5Zwc for <dhcwg@ietfa.amsl.com>; Fri, 13 Jul 2012 12:48:10 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) by ietfa.amsl.com (Postfix) with ESMTP id 2DAB921F8573 for <dhcwg@ietf.org>; Fri, 13 Jul 2012 12:48:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3997; q=dns/txt; s=iport; t=1342208927; x=1343418527; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=nzXlsYSVmtzbvvDm23gLW/71nmVbRV3WyZ/8fgWc2hU=; b=KQ9ld+S8EwxH6d/+jqqWryasBzYiy2Tq8kl/tKT2r7zqk3eXjFr3IFlD lKgPUloVr8UvV6y3SveH0jlIyvAI2aJWiye93pqWTyVAwb2ECw18TwraC njkHyyHKfaOajQmrW8kApWz8XBJFeWH3yefbxZsSbzvZrtMfaeNNfmMX0 c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av8EAFt6AFCtJXG9/2dsb2JhbABFuB2BB4IgAQEBBAEBAQ8BJzQLDAQCAQgOAwQBAQEKFAkHJwsUCQgCBAENBQgTB4drC5tXoCIEizyFFmADo1qBZoJf
X-IronPort-AV: E=Sophos;i="4.77,580,1336348800"; d="scan'208";a="98735538"
Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-9.cisco.com with ESMTP; 13 Jul 2012 19:48:46 +0000
Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id q6DJmkq5020089 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 13 Jul 2012 19:48:46 GMT
Received: from xmb-rcd-x04.cisco.com ([169.254.8.177]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.02.0298.004; Fri, 13 Jul 2012 14:48:46 -0500
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Andre Kostur <akostur@incognito.com>, Marc Perea <marccp@srttel.com>
Thread-Topic: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt
Thread-Index: AQHNYGY1LkUJv4XiBUiIDfZLQtJcKJcnnvUQ
Date: Fri, 13 Jul 2012 19:48:46 +0000
Message-ID: <489D13FBFA9B3E41812EA89F188F018E022DC6@xmb-rcd-x04.cisco.com>
References: <mailman.1109.1342111122.3330.dhcwg@ietf.org> <4FFEDF70.39E4.004A.0@srttel.com> <CAL10_BrKOB1OgbWdDwqHEPy5apJHZD8vpY6WE0TSA74vK43uOw@mail.gmail.com>
In-Reply-To: <CAL10_BrKOB1OgbWdDwqHEPy5apJHZD8vpY6WE0TSA74vK43uOw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.86.244.196]
x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19038.001
x-tm-as-result: No--37.760600-8.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "dhcwg@ietf.org" <dhcwg@ietf.org>
Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 19:48:12 -0000

>Ok, if we're restricting to ISP environments, why not mandate in
>such environments that they should be using the Remote ID (RFC
>4649) to specify the downstream "client".  Note that in DOCSIS
>environments, this is already happening.  (Just not in RFC 4649
>form... but in an enterprise-specific option 17).

And as I pointed out a few days ago, DOCSIS could care less about the CPE mac address. The important mac address printed on the box is for the CM, not the CPE. In DOCSIS, it wants to know the CM's mac address for DHCPv6 CPE requests, not the CPE's mac address. 

So, this draft could be used by DOCSIS only for the CM's DHCPv6 requests and something else would still be needed for when the CPE did DHCPv6 to provide the CM's mac-address. DOCSIS already solves both issues with its Vendor Specific Option definitions.

- Bernie

-----Original Message-----
From: dhcwg-bounces@ietf.org [mailto:dhcwg-bounces@ietf.org] On Behalf Of Andre Kostur
Sent: Thursday, July 12, 2012 3:40 PM
To: Marc Perea
Cc: dhcwg@ietf.org
Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-dhcpv6-client-link-layer-addr-opt-00.txt

On Thu, Jul 12, 2012 at 12:30 PM, Marc Perea <marccp@srttel.com> wrote:
>
> While true that the primary key of the DHCP server lease would be 
> client id, in the cases that this draft was intended to support the 
> MAC is a known indentifier readily printed on the outside of ethernet 
> packaging and on labels while hardware is powered off and not 
> connected to the network. That MAC is directly tied to a 
> client/customer in many operator environments, whether it sends 
> client-id or not. From the operator perspective, we don't really care 
> whether the DHCProtocol uses client-id or MAC to index it's internal 
> database - what we are concerned with is matching a MAC in existing 
> non-DHCP database to a client/customer so that we can match a v4 
> address and a v6 address (or several of each) to an individual 
> client/customer. The solution is intended to have the relay grab the 
> MAC from the v6 packet and add that as an option (hint) to the DHCP 
> server. Such implementation fills the need of the problem at hand, 
> only requiring changes be made to relay agents and DHCP server
 s. WG members represent most of the DHCPv6 server software and relay hardware/software suppliers. In short, the WG is both willing and able to effect the changes presented in the draft.
>
> It sounds like you're contending that the DHCP server won't be able to know which v4 == which v6 client, and I don't know if that's a problem. The problem this is intended to solve is that without supporting the link layer address that is readily available before connecting a device to a network or even turning it on, there is no way to set the server in advance to hand out known addresses that are intended for a specific client. For network access control and some tracking mechanisms, this is a big problem. By adding MAC to the v6 exchange, operators are able to match up MAC tracking databases, where MAC is an important index that they care about. The fact that the DHCP server uses or doesn't use it is irrelevant.
>
> We've presented what use case caused this draft to come into existence, and I understand the desire to make a protocol robust, but can you present a use case that relates here so that I can understand what you'd additionally like to achieve?

Ok, if we're restricting to ISP environments, why not mandate in such environments that they should be using the Remote ID (RFC 4649) to specify the downstream "client".  Note that in DOCSIS environments, this is already happening.  (Just not in RFC 4649 form... but in an enterprise-specific option 17).


--
Andre Kostur
_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www.ietf.org/mailman/listinfo/dhcwg