> Dino,
> 
>> On 24 Mar 2025, at 14:51, Dino Farinacci <farina...@gmail.com> wrote:
>> 
>> The low order 24 bits of the 32 bits in the control plane is used in the 
>> data plane.
> 
> Can you point me where the conversion is specified?

No. It happened multiple times over a 10 year period. I am not going to take 
time to look it up. And it doesn't matter, the intent was to do a many-to-1 
mapping between the control-plane IID (32-bits) to the data-plane IID (24 
bits). 

We did this at cisco so we were not limited to 2^^24 VPNs and potentially have 
to same size problem VLANs had. So if you build a collection of xTRs from the 
mapping system that uses the IID 32-bit value 0x00000001 and other set that 
uses the same value the control plane makes sure that the data-plane doesn't 
overlap among xTRs. So each set can use 0x000001 (24-bits) in the data plane.

> 
>> It’s a feature and implemented. Do not remove this. You break 
>> implementations.
> 
> If you remeber you made the exact same argument for 9300. IETF security 
> review pointed out the inconsistency of the argument and ended up defining 
> IID as a 24-bit field.

You will break implementations. And I am trying to perserve them. I'm not going 
to bring this up again. If you do not include a 32-bit IID in the LISP-DDT 
draft, I cannot accept and support it.

> If I receive a data plane packet with a certain IID value on 24-bits and I 
> have in my control plane several 32-bit IIDs with the same 24-bits value 
> there is no way I can reasonably know which 32-bits IID is the correct one. 
> This can also be a security issue.

See above.

> We can agree that we have different views on this topic. Hoep the group will 
> help to make a decision ;-)

Just don't break implementations. Or more to the point, don't make 8111bis 
irrelevant.

Dino

> 
> L.
> 
> 
> 
>> 
>> This has been brought up several times before (by you)  and I have made the 
>> same comment. 
>> 
>> Dino
>> 
>>> On Mar 24, 2025, at 6:41 AM, Luigi Iannone <g...@gigix.net> wrote:
>>> 
>>> Hi Dino,
>>> 
>>> 
>>> 
>>>> On 18 Mar 2025, at 22:04, Dino Farinacci <farina...@gmail.com> wrote:
>>>> 
>>>> Regarding what you said here Luigi, creating a 32-bit IID was intentiional 
>>>> so you can have more than 2^24 VPNs per instance of a data-plane. That is 
>>>> you can duplicate IIDs if different mapping systems were used for the same 
>>>> underlay.
>>> 
>>> Yes, but RFC 9300 specifies IID as a 24 bits field. There is no 
>>> inter-operable description in how to convert a 32-bit field in a 24-bit and 
>>> vice versa. Hence we should just stick to 24 bits.
>>> 
>>>> 
>>>> Also there was something you said that was incorrect. You said "on the 
>>>> wire the IID is 24-bits”.
>>> 
>>> You are right on this. I did remeber the 8060 type 2 LCAF wrongly.
>>> 
>>> 
>>>> Well when control plane messages are sent on the wire they are 32-bits. So 
>>>> in data packets its 24 and in control packets its 32.
>>> 
>>> Which is an inconsistency and we should fix this now.
>>> 
>>> Luigi
>>> 
>>>> 
>>>> Dino
>>>> 
>>>> <PastedGraphic-1.png>_______________________________________________
>>>> lisp mailing list -- lisp@ietf.org
>>>> To unsubscribe send an email to lisp-le...@ietf.org
>>> 
> 

_______________________________________________
lisp mailing list -- lisp@ietf.org
To unsubscribe send an email to lisp-le...@ietf.org

Reply via email to