RE: 答复: Q on Ver.-05 of draft-ietf-radext-ipv6-access after IETF81 radext session

Leaf yeh <leaf.y.yeh@huawei.com> Tue, 16 August 2011 15:35 UTC

Return-Path: <owner-radiusext@ops.ietf.org>
X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com
Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C8F11E809B for <ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com>; Tue, 16 Aug 2011 08:35:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[AWL=-2.449, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, MIME_BASE64_TEXT=1.753, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-4, SARE_SUB_ENC_GB2312=1.345]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MZM+C5IHwFir for <ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com>; Tue, 16 Aug 2011 08:35:54 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 545BE21F8C0D for <radext-archive-IeZ9sae2@lists.ietf.org>; Tue, 16 Aug 2011 08:35:54 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from <owner-radiusext@ops.ietf.org>) id 1QtLdq-0004MX-UI for radiusext-data0@psg.com; Tue, 16 Aug 2011 15:33:22 +0000
Received: from szxga01-in.huawei.com ([119.145.14.64]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from <leaf.y.yeh@huawei.com>) id 1QtLdg-0004M5-Bb for radiusext@ops.ietf.org; Tue, 16 Aug 2011 15:33:12 +0000
Received: from huawei.com (szxga05-in [172.24.2.49]) by szxga05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LQ1001H51V8QA@szxga05-in.huawei.com> for radiusext@ops.ietf.org; Tue, 16 Aug 2011 23:33:08 +0800 (CST)
Received: from szxrg01-dlp.huawei.com ([172.24.2.119]) by szxga05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LQ100DNA1V67O@szxga05-in.huawei.com> for radiusext@ops.ietf.org; Tue, 16 Aug 2011 23:33:08 +0800 (CST)
Received: from 172.24.2.119 (EHLO szxeml208-edg.china.huawei.com) ([172.24.2.119]) by szxrg01-dlp.huawei.com (MOS 4.1.9-GA FastPath queued) with ESMTP id ADE81678; Tue, 16 Aug 2011 23:33:06 +0800 (CST)
Received: from SZXEML404-HUB.china.huawei.com (10.82.67.59) by szxeml208-edg.china.huawei.com (172.24.2.60) with Microsoft SMTP Server (TLS) id 14.1.270.1; Tue, 16 Aug 2011 23:33:01 +0800
Received: from SZXEML510-MBS.china.huawei.com ([169.254.8.116]) by szxeml404-hub.china.huawei.com ([fe80::75b7:3db9:fedc:a56d%13]) with mapi id 14.01.0270.001; Tue, 16 Aug 2011 23:33:03 +0800
Date: Tue, 16 Aug 2011 15:33:02 +0000
From: Leaf yeh <leaf.y.yeh@huawei.com>
Subject: RE: 答复: Q on Ver.-05 of draft-ietf-radext-ipv6-access after IETF81 radext session
In-reply-to: <2027097252.176133.1313421711590.JavaMail.root@sz0057a.westchester.pa.mail.comcast.net>
X-Originating-IP: [172.24.2.41]
To: "David B. Nelson" <d.b.nelson@comcast.net>, Wojciech Dec <wdec@cisco.com>
Cc: "draft-ietf-radext-ipv6-access@tools.ietf.org" <draft-ietf-radext-ipv6-access@tools.ietf.org>, "radiusext@ops.ietf.org" <radiusext@ops.ietf.org>, fine sz <fine_sz@huawei.com>, Qiujin <qiujin@huawei.com>, Wangshuxiang <wangshuxiang@huawei.com>, "draft-tan-v6ops-fast6-aaa@tools.ietf.org" <draft-tan-v6ops-fast6-aaa@tools.ietf.org>, roberta maglione <roberta.maglione@telecomitalia.it>, "jacniq@gmail.com" <jacniq@gmail.com>, Bernard Aboba <bernard_aboba@hotmail.com>
Message-id: <382D9B71-9EE2-4E56-AACE-EE1C2C982F6A@mimectl>
MIME-version: 1.0
Content-type: multipart/alternative; boundary="Boundary_(ID_UAFKLvEiFiAN8FyfF5KR4A)"
Content-language: zh-CN
Accept-Language: zh-CN, en-US
Thread-topic: 答复: Q on Ver.-05 of draft-ietf-radext-ipv6-access after IETF81 radext session
Thread-index: AcxK5yu3GGjTmDXYQN+8DXe4n1z3TwA1YP+A//99JICAAALPAIAAhpWC///+E3v///vpIIAAHSBY///8hsP///hb8P//4L6o///A+qL/9rzAo//ro/OA/8mB5lD/jIfrZf8ZYB+A/jEiMMD8YcbOyg==
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
X-CFilter-Loop: Reflected
References: <CA6ED908.14D17%wdec@cisco.com> <2027097252.176133.1313421711590.JavaMail.root@sz0057a.westchester.pa.mail.comcast.net>
Sender: owner-radiusext@ops.ietf.org
Precedence: bulk
List-ID: <radiusext.ops.ietf.org>

David - It's almost always the *contents* of attributes that is interpreted by the NAS...

I agree.

I thought AAA server just need to indicate single or multiple pool names, whose meaning & purpose should definitely be known in advanced by AAA server.

I doubted the attributes of 'Delegated-IPv6-Prefix-Pool' and 'Stateful-IPv6-Address-Pool' will make NAS's life easier than before. :-) I believe NAS will double check the type of pool against the name string in the different type container of the attributes (or proposed attributes) including Framed-Pool, Framed-IPv6-Pool, Delegated-IPv6-Prefix-Pool and Stateful-IPv6-Address-Pool. Right?


-----Original Message-----
From: David B. Nelson [mailto:d.b.nelson@comcast.net]
Sent: Monday, August 15, 2011 11:22 PM
To: Wojciech Dec
Cc: draft-ietf-radext-ipv6-access@tools.ietf.org; radiusext@ops.ietf.org; fine sz; Qiujin; Wangshuxiang; draft-tan-v6ops-fast6-aaa@tools.ietf.org; Leaf yeh; roberta maglione; jacniq@gmail.com; Bernard Aboba
Subject: Re: 答复: Q on Ver.-05 of draft-ietf-radext-ipv6-access after IETF81 radext session

> ... it looks very much as relying on the special NAS feature
> to interpret *the contents* of the attribute as to the pools...

Special NAS feature?  Why is the interpretation of this proposed RADIUS attribute any more special than NAS behavior that interprets any other attribute?  It's almost always the *contents* of attributes that is interpreted by the NAS,

> ...to be used, only this time with the contents being laid down as
> the enumerated type code points in a draft.

I think an enumerated type is preferable to parsing strings when the semantics of the attribues is to apply one of a limited number of discreet choices.

> This does not help given a) past precedent in terms of Radius
> pool definitions (there are already 2 pools, and they are being
> used), nor b) give the operator an explicit indication regarding
> the use of a pool, rather than implicit.

I don't undertand either of these points.  What *RADIUS* precedent exists, and by that I mean a precedent in normative text?  If you're referring to ad-hoc implementation practice, in the absence of any normative guidance, I suggest that in standardizing a solution to that sort of gap in the protocol, one would not be unduly influenced by the fact that various ad-hoc solutions had been implemented.  That would defeat the purpose of standardizing behavior.

> Besides the above, as with any enumerated type, issues will start
> should there be another combination that someone comes up with or
> wants...

The IANA code point allocation procedures should be sufficiently open to permit adding additional "flavors" without invoking IETF consensus or WG approvals.

> Frankly, other than it being another way of doing things, I personally
> don’t see much of a benefit.

If you are invested in an existing implementation using another approach I can understand that, but a clearly defined, enumerated value attribute seems more attractive to me.

-- Dave