Re: [Mip6] mip6-aaa frameworks

[Samita Chakrabarti <[e-mail]>]

Hi Alper,

Thanks for providing an analysis of different proposals/framework.

I'd agree with Julien, that draft-chakrabati-mip6-bmip-00.txt
goes with Framework 4 very well for retrieving Home Agent address
and initial security association for bootstrap. 
Although the BMIP draft is not about AAA and MIPv6, it can co-exist
with having a AAA server in the foreign network and a AAA back-end server
tied to HA. So, it makes sense to add this draft to the list for
completeness.

In the next version of the draft we are going to clarify that
the BMIP draft can be used for different types of access networks
(802.1X, PANA, UAM, physical access , Local AAA) in order to gain
access to the local network.

Thanks,
-Samita

> > 
> > Framework 4:
> > ------------
> > A backend AAA protocol is executed between the HA and the AAA server in
> > response to the MIP6 signaling between the MN and the HA. Similar to the
> > use of AAA protocols with MIPv4 co-located care-of address case.
> > 
> > Related I-Ds:
> > 
> > draft-giaretta-mip6-aaa-ha-goals-00.txt
> > draft-yegin-mip6-aaa-fwk-00.txt
> 
> I would add:
> draft-chakrabati-mip6-bmip-00.txt
> (DNS to discover HA + IKEv2 and AAA-HA)
> 
> draft-tschofenig-mip6-bootstrapping-pana
> (needs to relax PANA on the one IP hop between PaC and PAA) assumption
> 
> > Discussion:
> > This one appears to be the most needed framework. It is assumed that MN
> > already knows the HA address. 
> > 
> > 
> > Are there other frameworks to add?
> 
> I also wrote a proposition draft-bournelle-pana-mip6-00. This
> proposition rely on PANA. The PAA is in charge of allocating the HA and
> of providing necessary information to HA and MN. The problem with this
> approach is that the HA allocation is only in the visited domain.
> However, the idea is that the AAA server explicitely authorize the service but
> delegate configuration process to an agent.
> 
> Do you think that we can make a framework with this ?
> 
> -- 
> [e-mail]
> 
> _______________________________________________
> Mip6 mailing list
> [e-mail]
> https://www1.ietf.org/mailman/listinfo/mip6


_______________________________________________
Mip6 mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/mip6