Hello, Thanks for the comments!
Indeed in a scenario where all the requesting routers connecting to a delegating router (BNG) would have PD_EXCLUDE capability, using the Framed-IPv6-Prefix to infer what to put into the OPTION_PD_EXCLUDE field is sufficient. But if there is a mix of PD_EXCLUDE-capable and not capable requesting clients, the situation becomes more complex. The fundamental problem is that Prefix Delegation usually happens after the RADIUS exchange, so the RADIUS server cannot really know whether the customer is exclude-capable or not. If, for example, the client is not exclude-capable, then having the RADIUS return a Framed-IPv6-Prefix that is part of the (greater) Delegated-IPv6-Prefix is problematic for obvious reasons. In fact, I, for one, cannot wrap my head around a way to cover both cases (exclude-capable and non-exclude-capable) using only the two existing RADIUS attributes *and* at the same time maintain backwards compatibility with old customers. As suggested, one approach would be to define a new RADIUS attribute (say IPv6-Excluded-Prefix) which would be used to enumerate the WAN (and be put in the OPTION_PD_EXCLUDE of course) in case of an exclude-capable customer. But this gets rather messy, in the sense that iff the customer is exclude-capable and the IPv6-Excluded-Prefix is returned, then the IPv6-Excluded-Prefix is used to enumerate the WAN, otherwise the normal avenue (Framed-IPv6-Prefix or Framed-IPv6-Pool or Framed-IPv6-Address, etc) is followed and the IPv6-Excluded-Prefix is ignored. And, admittedly, having to always provide a Framed-IPv6-Prefix foreign to the Delegated-IPv6-Prefix kind of defeats the whole purpose of RFC6603 in some ways. Any comments on that? How do you believe the case of mixed clients should be handled without breaking existing conventions? Kind regards, Athanasios Douitsis On Tue, Nov 19, 2013 at 7:47 PM, Roberta Maglione (robmgl) <[email protected] > wrote: > >That would be a trivial check in the RADIUS client, right? If the > Framed-IPv6-Prefix falls into the Delegated-IPv6->Prefix, then you do the > exclude, otherwise not. > > Ok, you are right this is a way to do it. > > Thanks > Roberta > > -----Original Message----- > From: radext [mailto:[email protected]] On Behalf Of Jouni Korhonen > Sent: Tuesday, November 19, 2013 12:43 PM > To: Roberta Maglione (robmgl) > Cc: [email protected]; Athanasios Douitsis; Bernie Volz (volz); Michael > Richardson; [email protected] WG; [email protected] > Subject: Re: [radext] [homenet] [dhcwg] PPP, DHCPv6 and Prefix Delegation > > > On Nov 19, 2013, at 7:10 PM, "Roberta Maglione (robmgl)" <[email protected]> > wrote: > > > Hello, > > I see your point. In my opinion if you would like to have all the > prefixes assigned by RADIUS server in order to be able to cover the > scenario you described in a clean way you would need a new RADIUS attribute > for PD_EXCLUDE. > > I am not sure I agree entirely. > > > > The reason why I think a new radius would be required is because you > need to differentiate between the scenario where Framed-IPv6-Prefix is used > to number the Wan link with a separate prefix (not included in the PD - > without the PD_EXCLUDE) and the scenario you described where the prefix for > the WAN link is part of the PD and you need to copy it into the PD exclude > option. > > That would be a trivial check in the RADIUS client, right? If the > Framed-IPv6-Prefix falls into the Delegated-IPv6-Prefix, then you do the > exclude, otherwise not. > > > > Today the BNG (that in this case is acting both as RADIUS Client and > Delegating Router) has no mean to know if the Framed-IPv6-Prefix should be > used for the PD_EXCLUDE or not and in my opinion it would be better not > overload the sematic of the Framed-IPv6-Prefix. > > Any comment? > > I would do the check rather than define a new attribute. > > - Jouni > > > > Thanks > > Roberta > > > > From: Athanasios Douitsis [mailto:[email protected]] > > Sent: Tuesday, November 19, 2013 11:50 AM > > To: Bernie Volz (volz) > > Cc: Jouni Korhonen; [email protected]; [email protected]; Roberta Maglione > (robmgl); [email protected] WG; Michael Richardson > > Subject: Re: [homenet] [dhcwg] PPP, DHCPv6 and Prefix Delegation > > > > > > On Tue, Nov 19, 2013 at 6:42 PM, Bernie Volz (volz) <[email protected]> > wrote: > > This must be done by the delegation router (if you are talking about the > DHCPv6 packet itself) - as it is the one that constructs the Advertise and > Reply messages to the client. > > > > Pardon me, I meant to wonder who should make the assignment, not who > should construct the packets. > > > > When you are using the Delegated-IPv6-Prefix AV pair, the delegating > router obviously constructs the packets with the delegated prefix value, > but the actual assignment has been done by the RADIUS server. By the same > token, I wondered whether it makes sense to do the same for the > OPTION_PD_EXCLUDE value. > > > > Kind regards, > > -- > > Athanasios Douitsis > > > > > > _______________________________________________ > radext mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/radext > -- Athanasios Douitsis
_______________________________________________ homenet mailing list [email protected] https://www.ietf.org/mailman/listinfo/homenet
