Re: 64bit MAC addresses and SLAAC

Fernando Gont <fgont@si6networks.com> Wed, 17 June 2020 15:30 UTC

Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 805163A08F8 for <ipv6@ietfa.amsl.com>; Wed, 17 Jun 2020 08:30:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fiIp1RWbkMvT for <ipv6@ietfa.amsl.com>; Wed, 17 Jun 2020 08:30:21 -0700 (PDT)
Received: from fgont.go6lab.si (fgont.go6lab.si [91.239.96.14]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9047C3A0822 for <ipv6@ietf.org>; Wed, 17 Jun 2020 08:30:21 -0700 (PDT)
Received: from [IPv6:2800:810:464:1f7:e998:ff26:4eb6:2dc9] (unknown [IPv6:2800:810:464:1f7:e998:ff26:4eb6:2dc9]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id B1DC3280687; Wed, 17 Jun 2020 15:30:18 +0000 (UTC)
Subject: Re: 64bit MAC addresses and SLAAC
To: Alexandre Petrescu <alexandre.petrescu@gmail.com>, Bob Hinden <bob.hinden@gmail.com>
Cc: IPv6 List <ipv6@ietf.org>
References: <e8a25961-5ac9-d35e-77dd-bf86f45cd077@gmail.com> <a17ae9f3-001c-07f6-84f9-a0ca583e6a00@gmail.com> <7AE5B6D0-AB01-4077-A9EF-5BD86F428681@gmail.com> <7a3b839f-099e-8fd3-35a2-4625df3c369e@gmail.com>
From: Fernando Gont <fgont@si6networks.com>
Message-ID: <76e8bd7a-4333-480f-de0f-dcc775418739@si6networks.com>
Date: Wed, 17 Jun 2020 12:20:38 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
MIME-Version: 1.0
In-Reply-To: <7a3b839f-099e-8fd3-35a2-4625df3c369e@gmail.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/CfOv6jpPQlF6Q9xaXiHP0mQ8uS0>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jun 2020 15:30:24 -0000

On 17/6/20 08:39, Alexandre Petrescu wrote:
> Le 15/06/2020 à 23:01, Bob Hinden a écrit :
>> Alexandre,
>>
>>> On Jun 15, 2020, at 1:23 PM, Alexandre Petrescu 
>>> <alexandre.petrescu@gmail.com> wrote:
>>>
>>> Hi,
>>>
>>> Before the sanitary situation I was studying an issue at ISO.
>>>
>>> The issue is about 64bit MAC addresses and SLAAC.
>>>
>>> SLAAC needs a 48bit MAC addresses in order to work, and it can not 
>>> work with a 64bit MAC address; (but yes, it can with 64bit IIDs).
>>
>> SLACC does not specify the length of the Interface ID, it does not 
>> require require 48-bit MAC addresses, and the reason for Modified 
>> EUI-64 Format Interface Identifiers in RFC4291 was to support 64bit 
>> EUI-64 Identifiers.   We have since moved away from using MAC 
>> addresses as Interface IDs.  See RFC 8064.
> 
> Bob,
> 
> RFC8064 says "this document [...] recommends against embedding stable
> link-layer addresses in IPv6 Interface Identifiers".
> 
> But a 64bit MAC address could be a random number as well, not
> necessarily stable.  Windows randomizes some of its MAC addresses.

Reusing IDs in multiple contexts is known to be a bad idea. See e.g.: 
https://tools.ietf.org/html/draft-irtf-pearg-numeric-ids-generation and 
https://tools.ietf.org/html/draft-gont-numeric-ids-sec-considerations

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492