RE: [Dime] Defining a new Application for mip6-split ?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Dime] Defining a new Application for mip6-split ?
Hi Julien,
There's nothing in RFC 4072 that would limit its use to, say, PPP
or 802.1X -- it works for IKEv2 as well (which can be considered
a special kind of network access, where the "link" is a tunnel
over IP).
The details (MIP6 or 802.11 WLAN or something else) can be sent
to the AAA server using e.g. Service-Type and/or NAS-Port-Type AVPs.
Best regards,
Pasi
> -----Original Message-----
> From: ext Julien Bournelle [mailto:julien.bournelle at int-evry.fr]
> Sent: 18 May, 2006 11:42
> To: dime at ietf.org
> Cc: hannes.tschofenig at gmx.net
> Subject: [Dime] Defining a new Application for mip6-split ?
>
> Hi all,
>
> we're in the process of updating/writing the document
> describing use of
> Diameter for the Mobile IPv6 split scenario.
>
> In the split scenario, the Mobile Node (MN) uses IKEv2 with the HA to
> setup IPsec SAs. This exchange is also used by the HA to authenticate
> the MN using EAP. The HA may rely on a AAA/EAP server for this. So we
> have the following scheme:
>
> MN <-- IKEv2-EAP --> HA <--------> AAA
>
> A priori Diameter EAP (RFC 4072) can be used between HA and AAA.
>
> The problem is that Diameter EAP is normally used for Network Access
> authentication.
>
> In our case, the AAA server must perform AAA functionality for the
> Mobile IPv6 service. The AAA server must know that it has to
> authorize the mip6 service and the accounting (ASR/ASA) is also for
> mip6 and not for network access.
>
> For the above reason, it seems that we should define a new Diameter
> Application. However, in the same time, the messages defined in
> Diameter EAP could be reused.
>
> So I'd like to hear opinions concerning this issue.
>
> Thanks,
>
>
> - Julien B.
>
>
> _______________________________________________
> DiME mailing list
> DiME at ietf.org
> https://www1.ietf.org/mailman/listinfo/dime
>
_______________________________________________
DiME mailing list
DiME at ietf.org
https://www1.ietf.org/mailman/listinfo/dime
Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.