RE: [Mip4] review of draft-devarapalli-mip4-mobike-connectivity-00.txt

"Kent Leung \(kleung\)" <kleung@cisco.com> Tue, 30 August 2005 19:24 UTC

Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EABj4-0005q9-Eb; Tue, 30 Aug 2005 15:24:54 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EABj2-0005pq-3G for mip4@megatron.ietf.org; Tue, 30 Aug 2005 15:24:52 -0400
Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03066 for <mip4@ietf.org>; Tue, 30 Aug 2005 15:24:50 -0400 (EDT)
Received: from sj-iport-4.cisco.com ([171.68.10.86]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EABkc-0002b3-DK for mip4@ietf.org; Tue, 30 Aug 2005 15:26:31 -0400
Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-4.cisco.com with ESMTP; 30 Aug 2005 12:24:42 -0700
Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id j7UJNqR0020860; Tue, 30 Aug 2005 12:24:33 -0700 (PDT)
Received: from xmb-sjc-235.amer.cisco.com ([128.107.191.85]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 30 Aug 2005 12:24:35 -0700
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [Mip4] review of draft-devarapalli-mip4-mobike-connectivity-00.txt
Date: Tue, 30 Aug 2005 12:24:34 -0700
Message-ID: <2979E38DD6FC6544B789C8DAD7BAFC52923F4C@xmb-sjc-235.amer.cisco.com>
Thread-Topic: [Mip4] review of draft-devarapalli-mip4-mobike-connectivity-00.txt
Thread-Index: AcWtlYHMKT16lPExQ9qJrvmK0zTX+wAAK4uA
From: "Kent Leung (kleung)" <kleung@cisco.com>
To: Vijay Devarapalli <vijayd@iprg.nokia.com>
X-OriginalArrivalTime: 30 Aug 2005 19:24:35.0385 (UTC) FILETIME=[74A9DA90:01C5AD98]
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 9ed51c9d1356100bce94f1ae4ec616a9
Content-Transfer-Encoding: quoted-printable
Cc: sami.vaarala@iki.fi, Jari Arkko <jari.arkko@piuha.net>, mip4@ietf.org
X-BeenThere: mip4@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Mobility for IPv4 <mip4.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/mip4>, <mailto:mip4-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:mip4@ietf.org>
List-Help: <mailto:mip4-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/mip4>, <mailto:mip4-request@ietf.org?subject=subscribe>
Sender: mip4-bounces@ietf.org
Errors-To: mip4-bounces@ietf.org

> which solution? draft-devarapalli-mip4-mobike-connectivity-00.txt
> is definitely not targeting this. it is only addressing a 
> scenario where IKEv2 IPsec VPNs with MOBIKE support are used. 
> it is doing this because there are some immediate use cases.
> 

OK.  I read the following and interpreted the draft proposed a solution
that addressed the identified shortcomings of x-MIP draft.

draft-devarapalli-mip4-mobike-connectivity-00.txt:

   "There has been some work done on using Mobile IPv4 and IPsec VPNs to
   provide roaming and secure connectivity to an enterprise [10].  The
   solution described in [10] was designed with certain restrictions,
   including requiring no modifications to the VPN gateways and involves
   the use of two layers of MIPv4, with one Home Agent inside the
   intranet and one in the Internet or in the DMZ before the VPN
   gateway.  The per-packet overhead is very high in this solution.  It
   is also challenging to implement and have two instances of MIPv4
   active at the same time on a mobile node. 

   This document describes an alternate solution that does not require
   two layers of MIPv4.  "

Then later, I see your clarification stated later.  OK.

   "The solution described in this document uses
   Mobile IPv4 when the mobile node is on the trusted network and MOBIKE
   capable IPsec VPNs when mobile node is on the untrusted network. "
 


> however, I would support an effort to define requirements for 
> a more optimal solution involving MIPv4 and *any kind* of VPN 
> gateway and encourage MIPv4 WG to look into an optimal solution.
> 

OK.  Should this draft be under the scope of such general solution?  A
IKEv2/MOBIKE VPN GW is a specific type of "any kind" of VPN GW, right?
:)  

Kent

-- 
Mip4 mailing list: Mip4@ietf.org
    Web interface: https://www1.ietf.org/mailman/listinfo/mip4
     Charter page: http://www.ietf.org/html.charters/mip4-charter.html
Supplemental site: http://www.mip4.org/