Re: [mif] Route option for DHCPv6 - next steps?

jouni korhonen <jouni.nospam@gmail.com> Thu, 05 April 2012 20:28 UTC

Return-Path: <jouni.nospam@gmail.com>
X-Original-To: mif@ietfa.amsl.com
Delivered-To: mif@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E50821F865D for <mif@ietfa.amsl.com>; Thu, 5 Apr 2012 13:28:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nAqbtnJAN3If for <mif@ietfa.amsl.com>; Thu, 5 Apr 2012 13:28:02 -0700 (PDT)
Received: from mail-wg0-f42.google.com (mail-wg0-f42.google.com [74.125.82.42]) by ietfa.amsl.com (Postfix) with ESMTP id 1D59A21F8659 for <mif@ietf.org>; Thu, 5 Apr 2012 13:28:01 -0700 (PDT)
Received: by wgbds11 with SMTP id ds11so106299wgb.1 for <mif@ietf.org>; Thu, 05 Apr 2012 13:28:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; bh=Qs3555YNSGj1cpsT8YZRsddHCV4eRsMaakIsgUhpn2M=; b=lj3YqWka/sd5YfG4aoRv1Po/t4ZKFilvVrqph7DwxK6Wz6ol/FuHWXBDA6gpCQJuMD QkHkHjr3uHv9Qpqu67jeLE5/SBYARRMskahVh7p9TI1HBxOOzuvyfuLMh9zWMRrwqej/ 6Lm8zBlLwoxL1Jw6f/5dSx/XugnC2fK/vtEHjZlLHIXn2yLtW0zxuboatS3tQcKJeySd gchlUJ9MzyElf5ZoxbWhX/C2+aap1nMHlpuHgDOCH6w7hcc5hhLXbS6/hHpBMz9G9aLb VdvbzUUmu8y6RIkmis/r5chhUUyeoKSF24QC2XBz7sHfmu5bXa/nws+F6y8J5XxZNL86 GdFw==
Received: by 10.216.133.93 with SMTP id p71mr2618655wei.10.1333657681165; Thu, 05 Apr 2012 13:28:01 -0700 (PDT)
Received: from [188.117.15.106] ([188.117.15.106]) by mx.google.com with ESMTPS id ff2sm255288wib.9.2012.04.05.13.27.58 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 05 Apr 2012 13:27:59 -0700 (PDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="us-ascii"
From: jouni korhonen <jouni.nospam@gmail.com>
In-Reply-To: <CAAedzxpMtu_7jWuES5=EKK4oqsFsvt4tPpu0J4fy3Uz4-TEt6Q@mail.gmail.com>
Date: Thu, 05 Apr 2012 23:27:54 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <97D4F82A-6321-403F-9097-F7B48601DCD5@gmail.com>
References: <75459BC2-E733-45C0-BC1C-25A19BBA1137@gmail.com> <CAE97176.17DF4%wdec@cisco.com> <CANF0JMD_zfXGcfMy+rCOFXS1aCZ3RPHoRtkBeS8kDgOFcfQ8Fg@mail.gmail.com> <75D251D1-9828-4AFE-9BEF-B376E97133C7@nominum.com> <CANF0JMBbhrF0G=hSvcvyZAddAMW7oSO5KpzUmcJXCtwcnmyWOw@mail.gmail.com> <4A221CE5-ECF0-4E07-9329-E6BAA3F06A96@nominum.com> <4EC4AADB.8030803@piuha.net> <DD1241D5-B794-49C3-A3A2-4294248DDD10@gmail.com> <4F719186.3060507@gmail.com> <CAKD1Yr3tSoDPcheriWdZEeKyhqpDANCP7Co0wVVqK5+mXc7e5A@mail.gmail.com> <4F72CD22.3080604@gmail.com> <CAKD1Yr3RUUthiawKrmxjSNqzEbJcOLpHvDGb9XLtdiU-tfEYyw@mail.gmail.com> <4F744831.3070406@gmail.com> <8D23D4052ABE7A4490E77B1A012B6307472D4175@mbx-01.win.nominum.com> <4F7453FC.3010502@gmail.com> <4F74546D.4060808@gmail.com> <72C42575-6BE2-4F27-B7F4-AA4539DA7EF9@lilacglade.org> <8D23D4052ABE7A4490E77B1A012B6307472D43A1@mbx-01.win.nominum.com> <069301cd0dd2$5954df00$0bfe9d00$@tndh.net> <550B9F79-1642-469F-9ED3-96DA26AA40AB@lilacglade.org> <8D23D4052ABE 7A4490E77B1A012B6307472D47A7@mbx-01.win.nominum.com> <CAAedzxpMtu_7jWuES5=EKK4oqsFsvt4tPpu0J4fy3Uz4-TEt6Q@mail.gmail.com>
To: Erik Kline <ek@google.com>
X-Mailer: Apple Mail (2.1084)
Cc: "mif@ietf.org" <mif@ietf.org>
Subject: Re: [mif] Route option for DHCPv6 - next steps?
X-BeenThere: mif@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Multiple Interface Discussion List <mif.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mif>, <mailto:mif-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mif>
List-Post: <mailto:mif@ietf.org>
List-Help: <mailto:mif-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mif>, <mailto:mif-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Apr 2012 20:28:03 -0000

RADEXT is working on http://tools.ietf.org/html/draft-ietf-radext-ipv6-access-06
which adds attributes for RFC4191 use, for example. That is then also implicitly
available for Diameter.

Assuming unicast RA would be doable using just RFC6085, then there should not
be much, if anything, to do protocol wise. The router that gets provisioned per
host via AAA knows the l2-l3 mapping already.. and the AAA server also learns
it. For dynamic changes of routes, AAA server can use e.g. l2 or l3 addresses
for a session identification when it sends a change of authorization..

The assumption here is that each host gets separately authorized when they attach
the network, which might be an issue on some links & deployments. However, some
network architectures with multiple routers/gateways (can) already use AAA for
centralized address management at per host granularity.

- Jouni


On Apr 4, 2012, at 4:53 AM, Erik Kline wrote:

>> It's true, as Jari said, that this can be accomplished in other ways, and maybe it would be better if it would.   If there were some better central management solution for populating unicast RA mappings on the router, then unicast RA would indeed address the exact use case that I think we care about.   But without the mechanism for populating routers, we still have a poorly-addressed use case.   And then the question is, do we want to develop a whole new protocol just to solve this one small problem?
>> 
>> It might be worth developing the protocol just to put this issue to bed.
> 
> Is RADIUS suitable for this?  At one point it was the general
> non-client provisioning protocol of choice, I thought.  I have not
> been following any of the evolving diameter work, but would a RADIUS
> option suffice?
> _______________________________________________
> mif mailing list
> mif@ietf.org
> https://www.ietf.org/mailman/listinfo/mif