Re: Comments on IPv6 Prefix Subdelegation

Fred Baker <fred@cisco.com> Wed, 29 July 2009 05:06 UTC

Return-Path: <fred@cisco.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E4B03A67FF for <ipv6@core3.amsl.com>; Tue, 28 Jul 2009 22:06:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.192
X-Spam-Level:
X-Spam-Status: No, score=-110.192 tagged_above=-999 required=5 tests=[AWL=0.407, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z3iLmyefvLN4 for <ipv6@core3.amsl.com>; Tue, 28 Jul 2009 22:06:01 -0700 (PDT)
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id BCCEE3A6B09 for <ipv6@ietf.org>; Tue, 28 Jul 2009 22:06:00 -0700 (PDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AlQAAJZ1b0qQ/uCKe2dsb2JhbACaCQEBFiQGoXaIJ5AZBYQQgU0
X-IronPort-AV: E=Sophos;i="4.43,286,1246838400"; d="scan'208";a="46023846"
Received: from ams-dkim-1.cisco.com ([144.254.224.138]) by ams-iport-1.cisco.com with ESMTP; 29 Jul 2009 05:06:01 +0000
Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n6T560N5015352; Wed, 29 Jul 2009 07:06:00 +0200
Received: from [10.43.1.21] (ams3-vpn-dhcp8087.cisco.com [10.61.95.150]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id n6T5606N016696; Wed, 29 Jul 2009 05:06:00 GMT
Message-Id: <74BEE319-C600-4DF5-B784-445B8CDEA770@cisco.com>
From: Fred Baker <fred@cisco.com>
To: "Azinger, Marla" <marla.azinger@frontiercorp.com>
In-Reply-To: <2E2FECEBAE57CC4BAACDE67638305F10485093E983@ROCH-EXCH1.corp.pvt>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v935.3)
Subject: Re: Comments on IPv6 Prefix Subdelegation
Date: Wed, 29 Jul 2009 07:06:00 +0200
References: <6C2F751B-119F-41D6-878C-C4CFBD57DF14@cisco.com> <2E2FECEBAE57CC4BAACDE67638305F10485093E811@ROCH-EXCH1.corp.pvt> <A17AA367-2FC2-4EC8-A3B4-A7EAB1F0C1CC@cisco.com> <2E2FECEBAE57CC4BAACDE67638305F10485093E983@ROCH-EXCH1.corp.pvt>
X-Mailer: Apple Mail (2.935.3)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3787; t=1248843960; x=1249707960; c=relaxed/simple; s=amsdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=fred@cisco.com; z=From:=20Fred=20Baker=20<fred@cisco.com> |Subject:=20Re=3A=20Comments=20on=20IPv6=20Prefix=20Subdele gation |Sender:=20; bh=9vcO7uipFQkZUDl2lOBZOH0pu1pAu5lD4kXKH7T0zug=; b=v7PijUtvEqC/bXiwUNHCQr5h0SKZ5XdVFBuufpD60X7Izs5Cqrz9iV1Rpj /waxXw7PnDRW/Orq0rWsRdfJA0MKXcTAUsqYCh3xkDx9eu+RIP7eXvdd1kfw ACZkm/shR8;
Authentication-Results: ams-dkim-1; header.From=fred@cisco.com; dkim=pass ( sig from cisco.com/amsdkim1002 verified; );
Cc: draft-ietf-v6ops-ipv6-cpe-router@tools.ietf.org, draft-donley-ipv6-cpe-rtr-use-cases-and-reqs@tools.ietf.org, IETF IPv6 Mailing List <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 05:06:02 -0000

Maybe you can help me reword it. What I am getting at is this:

a) within the home, in the example in figure 3, I have four routers  
and nine IP subnets. For each router to know where in the home to send  
data, the usual thing is for the routers in the home to do is  
communicate with the others using a routing protocol.

b) there are two CPE routers, each of which has an upstream router in  
its ISP. Since they are not exchanging a routing protocol with their  
upstream, they will need a static route in their own tables and to  
advertise a default upstream route within the home.

c) RFC 3704 observes on the ingress filtering performed in the  
upstream routers, and suggests that the two CPE routers should have  
some way to ensure that they only send traffic that will pass the  
filter to their upstream. Hence, each CPE Router might have a filter  
installed that looks at the source address of a datagram and when  
necessary forwards it to the other CPE. Or if we had source/ 
destination routing, could advertise the relevant prefix with its  
default route, so that the three routers (not CPE routers, just plain  
old routers, but probably with a firewall filter configured due to the  
observation about corporate information security policies applying to  
telecommuting home offices) would be able to send traffic to the right  
CPE.

How would you suggest I word this? In my mind, taking what is written  
there and confusing it with the relationship with the upstream ISP  
requires a strange reading of the text, which is all about routing  
within the home.

On Jul 28, 2009, at 3:51 PM, Azinger, Marla wrote:

>
> Fred:  Here is the paragraph that is worded in a way that leads me  
> to thinking you are saying to do OSPF to the upstream.  I believe  
> something needs to be taken out or added to clarify it:
>
> Routing in such an environment calls for a routing protocol such as
>   RIPv6 [RFC2080], IS-IS [RFC5308], or OSPF [RFC5340].  In addition,
>   each CPE router will need to install a static default route upstream
>   and advertise a default route in the chosen routing protocol.  The
>   issues raised in [RFC3704] also apply, meaning that the two CPE
>   routers may each need to observe the source addresses in datagrams
>   they handle to divert them to the other CPE to handle upstream
>
> -----Original Message-----
> From: Azinger, Marla
> Sent: Tuesday, July 28, 2009 4:25 AM
> To: 'Fred Baker'
> Cc: IETF IPv6 Mailing List; draft-ietf-v6ops-ipv6-cpe-router@tools.ietf.org 
> ; draft-donley-ipv6-cpe-rtr-use-cases-and-reqs@tools.ietf.org
> Subject: RE: Comments on IPv6 Prefix Subdelegation
>
> Im thinking one step further than the double routers.  For example  
> if these routers are not serviced by something at least the service  
> type of a dedicated T1 to each router then they would be doing VPN.   
> So there are more requirements that need to be met here to make OSPF  
> a realistic option.
>
> Thank you
> Marla
>
> -----Original Message-----
> From: Fred Baker [mailto:fred@cisco.com]
> Sent: Tuesday, July 28, 2009 2:59 AM
> To: Azinger, Marla
> Cc: IETF IPv6 Mailing List; draft-ietf-v6ops-ipv6-cpe-router@tools.ietf.org 
> ; draft-donley-ipv6-cpe-rtr-use-cases-and-reqs@tools.ietf.org
> Subject: Re: Comments on IPv6 Prefix Subdelegation
>
>
> On Jul 28, 2009, at 11:39 AM, Azinger, Marla wrote:
>
>> 2.  I have concern regarding the suggestions in section 2.3   Am I
>> interpreting this correctly that you are suggesting upstreams do OSPF
>> over VPN with residential customers?
>
> within their homes?
>
> No, I am suggesting that in a home that has more than one router,  
> one might want an IGP, just like one does in other places.