IETF Logo Mail Archive

Re: [HOKEY] [IPsec] IKEv2 and ERP

Yoav Nir <ynir@checkpoint.com> Wed, 23 November 2011 08:07 UTC

Return-Path: <ynir@checkpoint.com>
X-Original-To: hokey@ietfa.amsl.com
Delivered-To: hokey@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A26D11E8081; Wed, 23 Nov 2011 00:07:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.835
X-Spam-Level:
X-Spam-Status: No, score=-9.835 tagged_above=-999 required=5 tests=[AWL=-0.436, BAYES_00=-2.599, J_CHICKENPOX_31=0.6, J_CHICKENPOX_53=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fV3TtqZ6W05L; Wed, 23 Nov 2011 00:07:45 -0800 (PST)
Received: from michael.checkpoint.com (smtp.checkpoint.com [194.29.34.68]) by ietfa.amsl.com (Postfix) with ESMTP id 6C2AA11E8073; Wed, 23 Nov 2011 00:07:45 -0800 (PST)
X-CheckPoint: {4ECCA93A-1-1B221DC2-1FFFF}
Received: from il-ex01.ad.checkpoint.com (il-ex01.ad.checkpoint.com [194.29.34.26]) by michael.checkpoint.com (8.13.8/8.13.8) with ESMTP id pAN87W2L000985; Wed, 23 Nov 2011 10:07:32 +0200
Received: from il-ex03.ad.checkpoint.com (194.29.34.71) by il-ex01.ad.checkpoint.com (194.29.34.26) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 23 Nov 2011 10:07:32 +0200
Received: from il-ex01.ad.checkpoint.com ([126.0.0.2]) by il-ex03.ad.checkpoint.com ([194.29.34.71]) with mapi; Wed, 23 Nov 2011 10:07:32 +0200
From: Yoav Nir <ynir@checkpoint.com>
To: Yoav Nir <ynir@checkpoint.com>, 'Qin Wu' <bill.wu@huawei.com>, 'Yaron Sheffer' <yaronf.ietf@gmail.com>
Date: Wed, 23 Nov 2011 10:07:31 +0200
Thread-Topic: [IPsec] IKEv2 and ERP
Thread-Index: Acyo7iqlHSBxI/huQtKEb09W4qA4XAAx98PgAAA0NZA=
Message-ID: <006FEB08D9C6444AB014105C9AEB133F0179B226F942@il-ex01.ad.checkpoint.com>
References: <6205B3A8-4806-4F7A-B0CB-B9E36A744A37@checkpoint.com> <0A56F7B3-72CE-4274-AB68-7F24A366782B@checkpoint.com> <4EC8AF72.30206@gmail.com> <44C96308-32C8-4F02-B661-FDCA9029C274@checkpoint.com> <E4CD6969D2504339A962A9808C8F3B8A@china.huawei.com> <006FEB08D9C6444AB014105C9AEB133F0179B226F941@il-ex01.ad.checkpoint.com>
In-Reply-To: <006FEB08D9C6444AB014105C9AEB133F0179B226F941@il-ex01.ad.checkpoint.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
x-kse-antivirus-interceptor-info: scan successful
x-kse-antivirus-info: Clean
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-KSE-AntiSpam-Interceptor-Info: protection disabled
Cc: 'IPsecme WG' <ipsec@ietf.org>, "'hokey@ietf.org'" <hokey@ietf.org>
Subject: Re: [HOKEY] [IPsec] IKEv2 and ERP
X-BeenThere: hokey@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: HOKEY WG Mailing List <hokey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hokey>, <mailto:hokey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hokey>
List-Post: <mailto:hokey@ietf.org>
List-Help: <mailto:hokey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hokey>, <mailto:hokey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Nov 2011 08:07:46 -0000

 
[resending as plaintext]


Thanks, Qin
 
I wonder what the rationale is for this. Why would a phone that's already on the Internet connect to the visited network rather than the home network. Is that because of concerns about bandwidth and latency?
 
Anyway, is there a use case for ERP in those cases?
 
Yoav

________________________________

From: Qin Wu [mailto:bill.wu@huawei.com] 
Sent: 22 November 2011 10:07
To: Yoav Nir; Yaron Sheffer
Cc: IPsecme WG; hokey@ietf.org
Subject: Re: [IPsec] IKEv2 and ERP


Hi,Yoav:
yes,I am do aware of other cases where IKE is used beyond the home network. 
Here are two example use cases adopted by 3GPP.Thes two use cases only work for roaming scenario.


 
In both use cases,IKE negotiation happens between WLAN UE and Packet Data Gateway(PDG) or Tunnel
Termination Gateway (TTG). Both PDG and TTG are deployed in 3GPP visited Network.
 
Also we have two cases where IKE is used with the home network belows. Both PDG and TTG are deployed
in the 3GPP home netwrok. These two cases only work for non-roaming scenario.

 

 
 
Regards!
-Qin

v2.23.0 | Report a Bug | By Email