Re: But are we talking IPv6 only? That's how I read the draft. (Re: Some suggestions for draft-ietf-v6ops-cpe-simple-security-03)

Rémi Després <remi.despres@free.fr> Fri, 29 August 2008 12:05 UTC

Return-Path: <owner-v6ops@ops.ietf.org>
X-Original-To: ietfarch-v6ops-archive@core3.amsl.com
Delivered-To: ietfarch-v6ops-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 404AF3A6967 for <ietfarch-v6ops-archive@core3.amsl.com>; Fri, 29 Aug 2008 05:05:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.004
X-Spam-Level:
X-Spam-Status: No, score=0.004 tagged_above=-999 required=5 tests=[AWL=0.402, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ykCXUrGrUE4y for <ietfarch-v6ops-archive@core3.amsl.com>; Fri, 29 Aug 2008 05:05:26 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 504C13A692C for <v6ops-archive@lists.ietf.org>; Fri, 29 Aug 2008 05:05:26 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-v6ops@ops.ietf.org>) id 1KZ2aP-000Pk2-IR for v6ops-data@psg.com; Fri, 29 Aug 2008 11:56:17 +0000
Received: from [212.27.42.36] (helo=smtp6-g19.free.fr) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from <remi.despres@free.fr>) id 1KZ2aL-000PjV-Pp for v6ops@ops.ietf.org; Fri, 29 Aug 2008 11:56:15 +0000
Received: from smtp6-g19.free.fr (localhost.localdomain [127.0.0.1]) by smtp6-g19.free.fr (Postfix) with ESMTP id 5CD431725B; Fri, 29 Aug 2008 13:56:12 +0200 (CEST)
Received: from ordinateur-de-remi-despres.local (per92-10-88-166-221-144.fbx.proxad.net [88.166.221.144]) by smtp6-g19.free.fr (Postfix) with ESMTP id 7129D1973C; Fri, 29 Aug 2008 13:56:10 +0200 (CEST)
Message-ID: <48B7E397.6050502@free.fr>
Date: Fri, 29 Aug 2008 13:55:03 +0200
From: Rémi Després <remi.despres@free.fr>
User-Agent: Thunderbird 2.0.0.16 (Macintosh/20080707)
MIME-Version: 1.0
To: "Templin, Fred L" <Fred.L.Templin@boeing.com>
CC: james woodyatt <jhw@apple.com>, IPv6 Operations <v6ops@ops.ietf.org>
Subject: Re: But are we talking IPv6 only? That's how I read the draft. (Re: Some suggestions for draft-ietf-v6ops-cpe-simple-security-03)
References: <20080824204553.08131c65.ipng@69706e6720323030352d30312d31340a.nosense.org> <48B1CCE8.1070305@gmail.com> <01af01c9065b$b4602440$c2f0200a@cisco.com> <48B23391.1090503@gmail.com> <01cd01c90672$a57c8790$c2f0200a@cisco.com> <48B31DA3.6080001@gmail.com> <07d201c906f7$50a85e30$c2f0200a@cisco.com> <48B32B43.5010103@gmail.com> <084c01c906fe$f9bf1840$c2f0200a@cisco.com> <48B33430.40704@gmail.com> <A31EB889-2BD9-4283-A408-AB6DCC1D568A@suspicious.org> <08be01c90712$d876cd40$c2f0200a@cisco.com> <20080827194713.23271bd1.ipng@69706e6720323030352d30312d31340a.nosense.org> <CD947C45-58F7-47F1-807F-A276490B1E39@apple.com> <0e6001c908a2$b8fcf700$c2f0200a@cisco.com> <F0E4B018-AA5E-4344-A40B-3F6D974B7EA1@apple.com> <001b01c908ac$2b7d5140$c2f0200a@cisco.com> <39C363776A4E8C4A94691D2BD9D1C9A104E93359@XCH-NW-7V2.nw.nos.boeing.com> <05ad01c90922$854aa710$c2f0200a@cisco.com> <FD70B36F-FCD4-4BC4-9368-C0BEE1B162F0@apple.com> <39C363776A4E8C4A94691D2BD9D1C9A104E93603@XCH-NW-7V2.nw.nos.boeing .com>
In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A104E93603@XCH-NW-7V2.nw.nos.boeing.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-v6ops@ops.ietf.org
Precedence: bulk
List-ID: <v6ops.ops.ietf.org>

Templin, Fred L   (m/j/a) 8/28/08 10:05 PM:

>> -----Original Message-----
>> From: james woodyatt [mailto:jhw@apple.com] 

>> The minimum set of models I think we should consider are..
>>
>> A) CPE is a router connected to a native IPv6 service provider with  
>> prefix delegation.  Note: this includes dual-stack-lite CPE, as  
>> currently proposed.
>>
>> B) CPE is an IPv4/NAT router connected to a service provider where  
>> IPv6-in-IPv4 tunneling is available with a default route to 
>> the public  
>> default-free zone, e.g. 6to4, tunnel-broker, etc.
>>
>> Are there *any* other realistic models to consider for residential CPE?

Not that I see, understanding that 6rd (deployed by Free of the Iliad 
Group, and described in draft-despres-6rd-00) is in the list of B.

> CPE is an IPv4/NAT router connected to a service provider
> where IPv6-in-IPv4 tunneling is available with a default
> route to a border gateway for the service provider, e.g.,
> ISATAP (with private IPv4 address on the CPE's provider-
> facing interface).

- ISATAP is a tool that assigns full /128 addresses to IPv6 hosts of 
IPv4-only sites.
- If my understanding of the subject is right, it is therefore not a 
tool to assign an IPv6 prefix to a router CPE behind which several hosts 
have teir individual IPv6 addresses. (A prefix shorter than /128 would 
be necesssary, typically /48 to /64).


Regards,

RD