Dear George,
What you are suggesting is already done in the draft.
It proposes two mechanism to do access control for IPv6 where, one way of
doing it is a stateful approach is based on ND and the other is to do it in
the stateful approach with DHCPv6.
Instead of people bouncing back and forth I belive that the correct WG now
is the AAA WG.
-- thomas
>-----Original Message-----
>From: George Tsirtsis [mailto:[EMAIL PROTECTED]]
>Sent: den 21 augusti 2001 14:07
>To: 'Bernard Aboba'; Charlie Perkins
>Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
>[EMAIL PROTECTED];
>[EMAIL PROTECTED]
>Subject: RE: [AAA-WG]: AAA for IPv6
>
>
>It seams to me that the subject of "AAA for IPv6" has at least two
>components that may potentially belong to different WGs. One is the
>communication between the end node and the access router and
>the other is
>the communication between the AAA client in the Access Router
>and the rest
>of the AAA infrastructure.
>
>The latter is all about IPv6 support in the AAA protocol
>(Radius, diameter,
>cops)...and thus belongs to the AAA/COPS WGs...
>
>The former is about challenging the end node and transporting the
>identification and authentication parameters over the access
>link. This is
>not part of the AAA protocol (e.g.: typically Radius does not
>run over the
>access link). What is needed is a "carrier" mechanism for the
>parameters
>that need to be fed to the AAA protocol. PPPv6 for example
>provides such a
>carrier. MIPv4 also provides such a carrier to IPv4 nodes that
>use Mobile IP
>but, MIPv6, due to the lack of FAs, does not provide such an obvious
>carrier...hence Charlie's work. Now, there are a couple of
>things that can
>be done IMO.
>
>1. Use Neighbor Discovery (ND) as a carrier for the AAA
>parameters. e.g.:
>extend Neighbor Advertisements and Router Advertisements to carry
>challenge/response messages....this to me is the job of IPv6
>WG and could be
>the start of a much bigger fish called authenticated ND or
>
>2. Create a new carrier, independent from ND and with the
>specific task of
>carrying the appropriate challenge/response parameters...this
>to me belongs
>to URP WG.
>
>...my two drachma
>
>Regards
>George
>-----Original Message-----
>From: Bernard Aboba [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, August 21, 2001 8:06 AM
>To: Charlie Perkins
>Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
>[EMAIL PROTECTED];
>[EMAIL PROTECTED]
>Subject: Re: [AAA-WG]: AAA for IPv6
>
>
>The AAA WG only considers work items resulting from a consensus draft
>within a subject area WG. Until the IPNG or URP WG progresses
>a draft on
>the subject, we cannot consider a work item relating to AAA for IPV6.
>
>--------------------------------------------------------------------
>IETF IPng Working Group Mailing List
>IPng Home Page: http://playground.sun.com/ipng
>FTP archive: ftp://playground.sun.com/pub/ipng
>Direct all administrative requests to [EMAIL PROTECTED]
>--------------------------------------------------------------------
>
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page: http://playground.sun.com/ipng
FTP archive: ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------
