Re: [Int-area] Combined draft on DHCP authentication

[Iljitsch van Beijnum <iljitsch at muada.com>]

On 19 nov 2007, at 14:16, Richard Pruss wrote:

> > > http://www.ietf.org/internet-drafts/draft-pruss-dhcp-auth-dsl-02.txt

> > Doesn't seem to address IPv6. This makes it useless in my book.

> Ahh, you have written a book on authentication in DSL  
> architectures... ;-)

No. I'm guessing that would be a short book. Especially the IPv6 part,  
as doing IPv6 over PPP isn't workable in practice.

> If you point me to the IPv6 deployment architecture from the  
> DSLForum I can send you a draft on how to do the authentication in  
> it.  Putting EAP into DHCP v6 is no big trick, the real trick is  
> what does the rest of the IPv6 architecture look like.

Most hosts running IPv6 today don't run DHCPv6. If I'm not going to  
run DHCPv6 to learn IPv6 nameserver addresses, I'm also not going to  
do it just because my DSL provider wants me to.

> There are a ton of questions like:

[...]

> It is simply premature to guess at what authentication is appropriate

Does it make sense to go forward with something that requires an  
update for ALL (new?) customers only to redo much of the same for  
IPv6, probably less than two years later?

Figuring out how we want to do IPv6 over DSL (and cable) and then  
making all the changes in one go seems like a much more sensical  
approach to me.


_______________________________________________
Int-area mailing list
Int-area at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/int-area