Re: [v6ops] Implementation Status of PREF64

[David Farmer <[e-mail]>]

On Mon, Oct 11, 2021 at 1:58 PM STARK, BARBARA H <[e-mail]> wrote:

>
> > >    Yes, that is technically correct, and I expect most enterprises
> > >    don't, or at least don't want to, view Android devices as routers.
> > >    Also, I expect extending the network or "tethering" is not
> > >    acceptable behavior in a PCI or NIST-800-171 compliance contexts.
> > >    So, that is part of the challenge for this approach. and why
> > >    this may not be an acceptable replacement for IA_AN and/or IA_TA.
> >
> > I wonder what they are doing the IPv4 case. It is hard stop an IPv4
> device
> > from offering NAT to downstream devices. At least, in the case
> > where the enterprise does not have full control over the host.
>
> My experience with other smartphones suggests they only support
> router/hotspot functionality when connected to a radio access network (LTE,
> 5G). That allows the Wi-Fi to be used to supply the hotspot. I haven't seen
> the smartphone act as a Backhaul STA and an AP simultaneously. As has been
> pointed out, this discussion is primarily around Wi-Fi upstream
> connectivity.
> Barbara
>

This has been my experience as well, I haven't seen WiFi to WiFi tethering
provided as an option. But I suppose WiFi to USB or Bluetooth or possibly
other interface types is possible. I've only seen the cellular interface as
the source for tethering to date on smartphones and tablets. But, Internet
sharing on Windows and other OS is equally an issue in this respect.

More generally, by policy, we don’t allow our enterprise network to extend
by the users of the network. We do look for rogue WiFi networks and, to the
extent possible, look for other extensions to our network, this has been
done primarily with IPv4 to date. We are pretty lenient to first offenders,
but employees have been fired and students expelled for repeated offenses.

Nevertheless, explicitly allowing IA_PD could be viewed as explicitly
allowing network extension, and therefore viewed unfavorably especially in
a compliance context.

Thanks.

-- 
===============================================
David Farmer               Email:[e-mail]
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE        Phone: [phone]
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================