Re: [Dime] Session-ID in draft-sdecugis-dime-diameter-erp-01

[Behcet Sarikaya <behcetsarikaya at yahoo.com>]

----- Original Message ----
> From: Qin Wu <sunseawq at huawei.com>
> To: Behcet Sarikaya <sarikaya at ieee.org>
> Cc: dime at ietf.org
> Sent: Tuesday, June 30, 2009 9:07:31 PM
> Subject: Re: [Dime] Session-ID in draft-sdecugis-dime-diameter-erp-01
> 
> Hi, Behcet:
> Full EAP authentication can be method specific and create EAP method specific 
> session-Id, however, as described in RFC5296, ERP is a method independent 
> protocol. 

From EAP point of view, EAP exports several things like EMSK which is used by ERP. Session-ID is also exported and can be used by ERP.

That's my point.


Unless the ERP reuse the method specific Session-Id generated from 
> Full EAP authentication, it seems difficult for ERP to create EAP method 
> specific Session-Id. 

It is exported like EMSK, why should ERP regenerate the Session-ID?
It is only used in EMSKName calculation.

> On the other hand, if ERP can create Session-Id that is independent of EAP, 
> that's another case.

AAA specific session-IDs also exist but different for each protocol like RADIUS or Diameter. To be used for accounting like Sebastien mentioned. 
IMHO EAP Session-ID is not the AAA session ID.


Regards,

Behcet