Re: L=0 [was draft-pioxfolks-6man-pio-exclusive-bit-02.txt]

[Mark Smith <[e-mail]>]

On 31 Jan 2018 20:49, "Mikael Abrahamsson" <[e-mail]> wrote:

On Wed, 31 Jan 2018, Mark Smith wrote:

RFC8273 fails the proper layer 2 isolation/per-host link/LAN requirement
> too.
>

No, it doesn't. It just doesn't specify how this is to be achieved. I am of
the opinion that it doesn't need to, and it shouldn't. Yes, someone
implementing this should make sure that L2 assures that customers can't
spoof each other, that source validation etc is in place, but I am of the
opinion that RFC8273 doesn't need to specify how that should be done.


The hosts are all sharing the same Link-Local prefix, rather than each host
> having its own instance of the Link-Local prefix. They're all using the
> same router interface, rather than each host having its own dedicated
> router interface. There is sharing of IP layer resources between multiple
> hosts, so the hosts are not on separate links.
>

Sure.


Per RFC4291, in the Addressing Model section,
>
> "Currently, IPv6 continues the IPv4 model in that a subnet prefix is
>   associated with one link."
>
> multiple hosts that share just one common IPv6 subnet of possibly a
> number on the link are members of the same one link.
>

But the GUA prefix isn't the same, just the LLA.



You're saying hosts that have a common LL prefix *aren't* on the same link?




So when a host attaches to a port, the layer 2 device allocates a new
> virtual link, dedicated to the host, and then signals the router, which
> then allocates a new Link-Local prefix, new GUA and possibly ULA prefix,
> and then creates a new router interface for that individual host?
>

No. Those are your requirements, it's you who are saying all of those are
needed. Not me.


I don't have any experience or detailed knowledge of it , however I'm
> reminded of Access Node Control Protocol - RFC6320. Perhaps a generalised
> version of that for other types of layer 2 edge devices might be an option.
>

PPPoE doesn't solve the mac address duplication problem, either. Only
separate L2 per user solves that.

So what I have been proposing for lots of years is to keep the 1:N model
for IPv4 (because that's what a lot of people do), but create
one-vlan-per-user for IPv6, using ethertype based vlans. This requires no
host changes.