Re: [netlmm] Consensus call: RFC5107 based DHCP message interceptat MAG

Sri Gundavelli <sgundave@cisco.com> Tue, 14 April 2009 17:06 UTC

Return-Path: <sgundave@cisco.com>
X-Original-To: netlmm@core3.amsl.com
Delivered-To: netlmm@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 08FF43A6E4E for <netlmm@core3.amsl.com>; Tue, 14 Apr 2009 10:06:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.575
X-Spam-Level:
X-Spam-Status: No, score=-6.575 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JmxYYb8K-QI6 for <netlmm@core3.amsl.com>; Tue, 14 Apr 2009 10:06:05 -0700 (PDT)
Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com [171.68.10.86]) by core3.amsl.com (Postfix) with ESMTP id DB4C93A6E16 for <netlmm@ietf.org>; Tue, 14 Apr 2009 10:05:46 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.40,186,1238976000"; d="scan'208";a="33747331"
Received: from sj-dkim-6.cisco.com ([171.68.10.81]) by sj-iport-4.cisco.com with ESMTP; 14 Apr 2009 17:06:58 +0000
Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138]) by sj-dkim-6.cisco.com (8.12.11/8.12.11) with ESMTP id n3EH6w8L023166; Tue, 14 Apr 2009 10:06:58 -0700
Received: from irp-view13.cisco.com (irp-view13.cisco.com [171.70.120.60]) by sj-core-4.cisco.com (8.13.8/8.13.8) with ESMTP id n3EH6w3M010110; Tue, 14 Apr 2009 17:06:58 GMT
Date: Tue, 14 Apr 2009 10:06:58 -0700
From: Sri Gundavelli <sgundave@cisco.com>
To: "Koodli, Rajeev" <rkoodli@starentnetworks.com>
In-Reply-To: <4D35478224365146822AE9E3AD4A2666035AAAB2@exchtewks3.starentnetworks.com>
Message-ID: <Pine.GSO.4.63.0904140949460.2732@irp-view13.cisco.com>
References: <BE82361A0E26874DBC2ED1BA244866B9382A1F89@NALASEXMB08.na.qualcomm.com> <4D35478224365146822AE9E3AD4A2666035AAAA2@exchtewks3.starentnetworks.com> <BE82361A0E26874DBC2ED1BA244866B9382A1F91@NALASEXMB08.na.qualcomm.com> <4D35478224365146822AE9E3AD4A2666035AAAA5@exchtewks3.starentnetworks.com> <A13924FC-1FFB-4BC3-9E48-640BDE10C17B@gmail.com> <4D35478224365146822AE9E3AD4A2666035AAAB1@exchtewks3.starentnetworks.com> <03ADE51E-90B1-4FE0-809D-444D48D31849@gmail.com> <4D35478224365146822AE9E3AD4A2666035AAAB2@exchtewks3.starentnetworks.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=8530; t=1239728818; x=1240592818; c=relaxed/simple; s=sjdkim6002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=sgundave@cisco.com; z=From:=20Sri=20Gundavelli=20<sgundave@cisco.com> |Subject:=20Re=3A=20[netlmm]=20Consensus=20call=3A=20RFC510 7=20based=20DHCP=20message=20interceptat=0A=20MAG |Sender:=20; bh=Rwe4ZDjgn8FKRjyf94UPC8fylWYdKPPC6URHyiDVbA8=; b=oQAeLP/7DPbQn3gq0eE5jYGdecqmU6DS7UP3uK9MDTrp1pzG8L2BHdwwPU rLWC3U+IigncnGtHGGqXNC5SfzDnNbB/7vSi4JLTo6iMwBe7fKA82+lpMAt+ ec+suHl2sF;
Authentication-Results: sj-dkim-6; header.From=sgundave@cisco.com; dkim=pass ( sig from cisco.com/sjdkim6002 verified; );
Cc: netlmm@ietf.org
Subject: Re: [netlmm] Consensus call: RFC5107 based DHCP message interceptat MAG
X-BeenThere: netlmm@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: NETLMM working group discussion list <netlmm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/netlmm>, <mailto:netlmm-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netlmm>
List-Post: <mailto:netlmm@ietf.org>
List-Help: <mailto:netlmm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netlmm>, <mailto:netlmm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Apr 2009 17:06:07 -0000

On Tue, 14 Apr 2009, Koodli, Rajeev wrote:

>
> Hi,
>
> there seem to be some loose ends here. The reasoning given for the need to intercept DHCP messages at MAG was to allow for the state consistency between LMA and MAG. Your e-mail below suggests no such actions are necessary (at least for the DHCP-relay functionality). Sri's e-mail (as a reply to my previous e-mail) suggests using DNAv4 on the MN so that the MAG can synchronize the state:
>

Ok. Probably the way we both said it. Lets look at what we both said.

1. About DNAv4. The mobile node's typically apply DNAv4 for detecting
on-link presence. If DNAv4 procedure is trigerred, the MN will detect
the same link and will not perform DHCP specifically due to handoff
event. If DNAv4 procedure is not used, still the link that we present
from the perspective of layer-2, DHCP, default-router is consistent
and the MN will not detect a change. This is also the HO transparency
that Ryuji was talking about, it needs to be looked at in the context
of the DNA used or not used.

2. DNAv4 procedure has no bearing on the network. Its for the MN
to detect a link change. On the network, for the MAG to trigger
PMIP signaling, the MN-Attach, acces auth, a trigger from the network,
or even a CT from the prev MAG wil trigger the MAG to perform PMIP
signaling.

3. MAG will certainly synchroized the state from LMA through PMIP
signaling, only after each handoff. The MAG will not be in path for
subsequent DHCP events after handoff. This option will enable the MAG
to register itself to be in path for all messages. If a MN releases
an address, if the LMA recycles the address and allocates to some
other node. We will have two host routes one from the MAG1 to LMA,
LMA to MAG2. The kind of inconsistent states can be avoided, by
ensuring the node that created the routing state is aware of all
the DHCP transactions.



Sri




> "The mobile after handoff should trigger DNAv4 procedures for detecting
> onlink presence. MAG would complete the PMIP signaling and obtain all
> the state from the LMA, during this time."
>
> If we need DNAv4 for MAG and LMA synchronization, why could we not rely on LMA - MAG signaling in the first place?
>
> It would be good to have some clarity (and the corresponding text for revision) :-)
>
> Regards,
>
> -Rajeev
>
>
> ________________________________
>
> From: Ryuji Wakikawa [mailto:ryuji.wakikawa@gmail.com]
> Sent: Tue 4/14/2009 9:01 AM
> To: Koodli, Rajeev
> Cc: netlmm@ietf.org
> Subject: Re: [netlmm] Consensus call: RFC5107 based DHCP message interceptat MAG
>
>
>
> Hi Rajeev,
>
> On 2009/04/14, at 11:23, Koodli, Rajeev wrote:
>
>>
>> Hi Ryuji,
>>
>>> MN does not send any DHCP messages at handover, because HO is
>>> transparent to MN.
>>> When MN renew the  IP address, the new MAG (DHCP-relay) will
>>> intercept
>>> the packets with RFC5107 or promiscuous interception to sync the
>>> state
>>> (verify the IPv4 leasing time. DHCP relay does not maintain any
>>> states
>>> of DHCP clients).
>>
>> Until the MN sends any DHCP messages, the new MAG will not have the
>> consistent DHCP state then right?
>
> The general DHCP relay does not keep any states of MN. All the states
> are managed at DHCP server.
> We don't need to introduce any new states on DHCP relay for PMIP.
>
> In PMIP, we have decided to manage the address assignment by LMA
> (PMIP) and use DHCP to deliver the assigned address to MN.
> To co-operate DHCP and PMIP, we don't need any MN's actions to keep
> consistency of DHCP states.
>
>> Also, all the MAGs should be configured with this support.
>
> Yes, all the MAGs has to be either DHCP relay or server.
>
> regards,
> ryuji
>
>>
>>
>> Thanks,
>>
>> -Rajeev
>>
>>
>> regards,
>> ryuji
>>
>>
>>
>>
>>> Having said that, I am okay with keeping the optional mechanism, *as
>>> long as*
>>>
>>> 1. we describe the two choices we have - LMA being the sole DHCP
>>> node on the network side, which is mandatory, and the optional
>>> mechanism of MAG-on-path for DHCP
>>>
>>> 2. Clearly state what needs to be done for handovers for the
>>> optional mechanism, in addition to what is the purpose of the
>>> optional mechanism (it could not be just informative).
>>>
>>> These have to be captured, say in separate paragraphs.
>>>
>>> -Rajeev
>>>
>>>
>>>
>>> ________________________________
>>>
>>> From: Narayanan, Vidya [mailto:vidyan@qualcomm.com]
>>> Sent: Thu 4/9/2009 11:11 PM
>>> To: Koodli, Rajeev; netlmm@ietf.org
>>> Subject: RE: [netlmm] Consensus call: RFC5107 based DHCP message
>>> interceptat MAG
>>>
>>>
>>>
>>> Hi Rajeev,
>>> If the MAG does not intercept DHCP messages, it will be unaware of
>>> any DHCP state changes (e.g., lease termination, IP address change/
>>> release, etc.) for the MN.  We don't have mandatory defined behavior
>>> in the LMA to avoid such potential state changes.  So, short of
>>> using RFC5107, the MAG needs to intercept DHCP messages to figure
>>> this out.
>>>
>>> I also want to highlight the difference between using and not using
>>> RFC5107 behavior.  The use of RFC5107 will allow the MAG to do
>>> normal forwarding.  If not, the MAG will need to inspect on the
>>> {destination IP address, protocol, port} tuple to trap the DHCP
>>> packets destined to the server.
>>>
>>> Vidya
>>>
>>>> -----Original Message-----
>>>> From: netlmm-bounces@ietf.org [mailto:netlmm-bounces@ietf.org] On
>>>> Behalf Of Koodli, Rajeev
>>>> Sent: Thursday, April 09, 2009 10:51 PM
>>>> To: netlmm@ietf.org
>>>> Subject: Re: [netlmm] Consensus call: RFC5107 based DHCP message
>>>> intercept at MAG
>>>>
>>>>
>>>> Hi Vidya,
>>>>
>>>> question for my clarification: why does the MAG need to intercept
>>>> DHCP
>>>> messages?
>>>>
>>>> Thanks,
>>>>
>>>> -Rajeev
>>>>
>>>>
>>>> ________________________________
>>>>
>>>> From: netlmm-bounces@ietf.org on behalf of Narayanan, Vidya
>>>> Sent: Thu 4/9/2009 9:48 PM
>>>> To: netlmm@ietf.org
>>>> Subject: [netlmm] Consensus call: RFC5107 based DHCP message
>>>> intercept
>>>> at MAG
>>>>
>>>>
>>>>
>>>> An issue has been raised on the inclusion of the DHCP Server
>>>> Identifier
>>>> Override sub-option (specified in RFC5107) as a means for the MAG to
>>>> intercept the MN's DHCP messages sent to the DHCP server.  This
>>>> option
>>>> allows the relay (MAG) to act like the DHCP server and more directly
>>>> get the MN to even address the RENEW DHCP requests to itself, so
>>>> that
>>>> the MAG can include the Relay Agent option in those messages as
>>>> well.
>>>> Without this option, the relay in the MAG would need to intercept
>>>> all
>>>> DHCP messages.
>>>>
>>>> In PMIPv6, all packets from the MN will go through the MAG - from an
>>>> implementation perspective, my interpretation is that the use of
>>>> RFC5107 is likely to make a difference in the extent of hardware
>>>> based
>>>> forwarding that is made feasible in the MAG.  Otherwise,
>>>> functionally,
>>>> the MAG should be able to intercept all DHCP messages even without
>>>> this
>>>> option.
>>>>
>>>> The issue raised is primarily from an IPR perspective - please see
>>>> the
>>>> following link for the IPR terms associated with RFC5107:
>>>>
>>>> https://datatracker.ietf.org/ipr/124/
>>>>
>>>> I would like to hear WG input on whether you prefer to keep the
>>>> option
>>>> in the document or take it out.  If you can provide an explanation
>>>> for
>>>> the choice you make (IPR and/or technical), it will be useful.
>>>>
>>>> Please respond to the list by April 15th, 2009.
>>>>
>>>> Thanks,
>>>> Vidya <as co-chair>
>>>> _______________________________________________
>>>> netlmm mailing list
>>>> netlmm@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/netlmm
>>>>
>>>>
>>>> _______________________________________________
>>>> netlmm mailing list
>>>> netlmm@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/netlmm
>>>
>>>
>>> _______________________________________________
>>> netlmm mailing list
>>> netlmm@ietf.org
>>> https://www.ietf.org/mailman/listinfo/netlmm
>>
>>
>> _______________________________________________
>> netlmm mailing list
>> netlmm@ietf.org
>> https://www.ietf.org/mailman/listinfo/netlmm
>
>
>
> _______________________________________________
> netlmm mailing list
> netlmm@ietf.org
> https://www.ietf.org/mailman/listinfo/netlmm
>