Re: [Dime] WG adoption call for draft-zorn-dime-rfc4005bis-01

"Glen Zorn" <gwz@net-zen.net> Sun, 15 August 2010 10:19 UTC

Return-Path: <gwz@net-zen.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1DD133A680E for <dime@core3.amsl.com>; Sun, 15 Aug 2010 03:19:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.07
X-Spam-Level:
X-Spam-Status: No, score=-102.07 tagged_above=-999 required=5 tests=[AWL=0.529, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rqp2zuGtnFfr for <dime@core3.amsl.com>; Sun, 15 Aug 2010 03:19:00 -0700 (PDT)
Received: from smtpout05.prod.mesa1.secureserver.net (smtpout05-01.prod.mesa1.secureserver.net [64.202.165.218]) by core3.amsl.com (Postfix) with SMTP id 0DD1D3A6784 for <dime@ietf.org>; Sun, 15 Aug 2010 03:18:59 -0700 (PDT)
Received: (qmail 22096 invoked from network); 15 Aug 2010 10:19:36 -0000
Received: from unknown (124.157.141.92) by smtpout05.prod.mesa1.secureserver.net (64.202.165.218) with ESMTP; 15 Aug 2010 10:19:35 -0000
From: Glen Zorn <gwz@net-zen.net>
To: 'Sebastien Decugis' <sdecugis@nict.go.jp>
References: <A0A5F8D2-62B7-40BF-A9C2-8ED231D6323E@gmail.com> <4C5A5F2D.20508@nict.go.jp> <001c01cb346e$d7f9a460$87eced20$@net> <4C5A6DA9.30309@nict.go.jp> <003201cb347a$0fb844a0$2f28cde0$@net> <4C5B65DB.3040006@nict.go.jp> <003401cb3554$3ce0c6c0$b6a25440$@net> <4C5F5B28.7070900@nict.go.jp>
In-Reply-To: <4C5F5B28.7070900@nict.go.jp>
Date: Sun, 15 Aug 2010 17:19:17 +0700
Organization: Network Zen
Message-ID: <001301cb3c63$53471f70$f9d55e50$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acs3YxEy1cSLr9CeSXKDADv79i6kPQE/zzlg
Content-Language: en-us
Cc: dime@ietf.org
Subject: Re: [Dime] WG adoption call for draft-zorn-dime-rfc4005bis-01
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Aug 2010 10:19:01 -0000

Sebastien Decugis [mailto:sdecugis@nict.go.jp] writes:

>  Hi again Glen,

Hi, sorry for the slow reply!

...

> >>> In any case, if they decided to migrate to Diameter they could use
> the
> >>> pointless tunneling protocol, retiring their RADIUS server when the
> >>> transition was complete.
> >> You are implying that each domain can retire its RADIUS server only
> when
> >> *all* the domains have moved all their clients to Diameter... This
> >> reasoning may be possible in a single-domain context, but it does not
> >> hold in a multi-domain roaming consortium case.
> > Care to give some sort of rationale for this statement?
> Well, assume domain A is still using RADIUS and domain B has moved all
> its equipment to Diameter.
> Now a user from domain B is accessing the network through a NAS in
> domain A.
> 
> NAS-A -> RADIA agent (in RADIUS)
> RDR -> domain B in Diameter.
> Now, one needs to de-tunnel the RADIUS message from the RDR and then
> have a RADIUS stack to interpret this message, right?

Yes; presumably this would be the RADIUS server that they are retiring.

> Hence my comment that we cannot get rid of RADIUS in domain B until all
> domains in the consortium have moved to Diameter...

OK, but it was the assertion that "This reasoning may be possible in a
single-domain context, but it does not hold in a multi-domain roaming
consortium case" that I was questioning.

> In addition, with RADIA you loose the benefit of Diameter applications
> allowing to route different applications to different servers.

I'm confused: isn't the only Diameter app that deals w/RADIUS stuff NASREQ?


> 
> Best regards,
> Sebastien.
> 
> --
> Sebastien Decugis
> Research fellow
> Network Architecture Group
> NICT (nict.go.jp)
>