Re: [L2tpext] draft-mkonstan-keyed-ipv6-tunnel-00

"Henderickx, Wim (Wim)" <wim.henderickx@alcatel-lucent.com> Thu, 17 October 2013 05:11 UTC

Return-Path: <wim.henderickx@alcatel-lucent.com>
X-Original-To: l2tpext@ietfa.amsl.com
Delivered-To: l2tpext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19F1211E8238 for <l2tpext@ietfa.amsl.com>; Wed, 16 Oct 2013 22:11:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level:
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UCCDQa5BC7iB for <l2tpext@ietfa.amsl.com>; Wed, 16 Oct 2013 22:10:55 -0700 (PDT)
Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) by ietfa.amsl.com (Postfix) with ESMTP id 9B41B11E81F4 for <l2tpext@ietf.org>; Wed, 16 Oct 2013 22:10:55 -0700 (PDT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (h135-239-2-122.lucent.com [135.239.2.122]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id r9H5Ap35022660 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 17 Oct 2013 00:10:53 -0500 (CDT)
Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id r9H5ApBA007003 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 17 Oct 2013 07:10:51 +0200
Received: from FR711WXCHMBA07.zeu.alcatel-lucent.com ([169.254.3.193]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.02.0247.003; Thu, 17 Oct 2013 07:10:50 +0200
From: "Henderickx, Wim (Wim)" <wim.henderickx@alcatel-lucent.com>
To: "Maciek Konstantynowicz (mkonstan)" <mkonstan@cisco.com>
Thread-Topic: [L2tpext] draft-mkonstan-keyed-ipv6-tunnel-00
Thread-Index: AQHOyrtzE6NJM0e8dUeZGUDg6c02x5n4WPeA
Date: Thu, 17 Oct 2013 05:10:49 +0000
Message-ID: <CE853DE6.8A38C%wim.henderickx@alcatel-lucent.com>
In-Reply-To: <96EE5A5F6E4E6448B2AC953A71A9739B2A750D39@xmb-rcd-x06.cisco.com>
Accept-Language: nl-BE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.3.7.130812
x-originating-ip: [135.239.27.39]
Content-Type: multipart/alternative; boundary="_000_CE853DE68A38Cwimhenderickxalcatellucentcom_"
MIME-Version: 1.0
X-Scanned-By: MIMEDefang 2.57 on 135.245.2.37
Cc: "maciek@cisco.com" <maciek@cisco.com>, "l2tpext@ietf.org" <l2tpext@ietf.org>
Subject: Re: [L2tpext] draft-mkonstan-keyed-ipv6-tunnel-00
X-BeenThere: l2tpext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Layer Two Tunneling Protocol Extensions <l2tpext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/l2tpext>, <mailto:l2tpext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/l2tpext>
List-Post: <mailto:l2tpext@ietf.org>
List-Help: <mailto:l2tpext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/l2tpext>, <mailto:l2tpext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Oct 2013 05:11:01 -0000

Ok thx this covers it

From: "Maciek Konstantynowicz (mkonstan)" <mkonstan@cisco.com<mailto:mkonstan@cisco.com>>
Date: Thursday 17 October 2013 00:02
To: Wim Henderickx <wim.henderickx@alcatel-lucent.com<mailto:wim.henderickx@alcatel-lucent.com>>
Cc: "maciek@cisco.com<mailto:maciek@cisco.com>" <maciek@cisco.com<mailto:maciek@cisco.com>>, "l2tpext@ietf.org<mailto:l2tpext@ietf.org>" <l2tpext@ietf.org<mailto:l2tpext@ietf.org>>
Subject: Re: [L2tpext] draft-mkonstan-keyed-ipv6-tunnel-00

Wim,

Sorry, took a while to get back to you..

Many thanks for your comments. See inline.

On 16 Aug 2013, at 09:25, Henderickx, Wim (Wim) wrote:

Some review comments:

1) I am not sure the use of explaining port-level/single-stack/multi-stack is sensible or relevant, they should eb used as examples. It's enough to say that each logical interface (whatever it may be) is uniquely identified by an ipv6 address.

Agree. Proposed text replacing current description in section 2 :

The IPv6 L2TPv3 tunnel encapsulating device uniquely identifies each Ethernet L2 attachment connection by a port ID or a combination of port ID and VLAN ID(s) on the access side, and by an IPv6 address on the network side.
Any VLAN identifiers, S-VID, C-VID or tuple ( S-VID, C-VID ) are treated with local significance within the Ethernet L2 port and are not forwarded over the IPv6 L2TPv3 tunnel. IPv6 address is treated as the IPv6 L2TPv3 tunnel endpoint.

2) "The L2TPv3 encapsulating router identifies each L2TPv3 tunnel endpoint by a distinct /128 address" -> we should also describe the any cast behaviour and the fact the tunnel is identified by a unique src/dst address combination

Agree. Proposed additional text :

Certain deployment scenarios may require using a single IPv6 address to identify a tunnel endpoint for many IPv6 L2TPv3 tunnels. For such cases the tunnel encapsulating device identifies each tunnel by a unique combination of tunnel source and destination IPv6 addresses.

3) General:
There's no mention of fragmentation and reassembly requirements;

IMV recommendation should be avoided :)

Adding new section, with proposed text as follows :

X. Fragmentation and Reassembly

Using an encapsulation, Ethernet L2 in IPv6 in this case, will reduce the effective MTU of the datagram.

The recommended solution to deal with this problem is for the network operator to  increase the MTU size of all the links between the devices acting as IPv6 L2TPv3 tunnel endpoints to accommodate both the IPv6 L2TPv3 encapsulation header and the Ethernet L2datagram without fragmenting the IPv6 packet.

If it is impossible to increase the link MTU across the network, the IPv6 L2TPv3 encapsulating device MUST perform fragmentation and reassembly if the outgoing link MTU cannot accommodate the extra IPv6 L2TPv3 header for specific Ethernet L2 payload. Fragmentation MUST happen after the encapsulation of the IPv6 L2TPv3 packet.  Reassembly MUST happen before the decapsulation of the IPv6 L2TPv3 packet.

The proposed approach is in line with the DS-Lite specification [RFC6333].

OAM should be described better with reference to the OAM draft in L2VPN

Yes we need to add a section on the OAM. Proposed approach is to rely on Ethernet OAM for connectivity verification to keep things simple.
Wim, would you be available to work with us on this section ?

Thanks,
Maciek.

_______________________________________________
L2tpext mailing list
L2tpext@ietf.org<mailto:L2tpext@ietf.org>
https://www.ietf.org/mailman/listinfo/l2tpext