> There is one problem with allowing ping in access phase only. > > Suppose both a PaC and a PAA are in access phase, and the PaC sends a > ping request while the PAA sends a PAR to start re-authentication at > the same time. Then PAA will not accept the ping request because it > has entered re-authentication phase. If ping is allowed in any > state, then PAA can answer to the ping request.
I think the issue is about having two outstanding requests (one PANA-Ping and one other) at the same time. The PAA (or PaC) having to respond to a PANA-Ping-Request while it has an outstanding request shall not have a problem. What do you think? > BTW, I've found another issue here. In the above example, The PaC > will accept the PAR sent from the PAA and can return a PAN, but it > cannot send a new PAR (this can happen if the PAN does not carry EAP), > until the ping request is answered. This is actually breaking > lock-step behavior of PANA (queuing requests should not be required > for a lock-step protocol). What would be the issue of having request queuing? I'd like to see if we can avoid creating special case for PANA-Ping messages (e.g., putting them under a separate treatment). Alper _______________________________________________ Pana mailing list [email protected] https://www1.ietf.org/mailman/listinfo/pana
