[IPsec] INTERNAL_IP6_ADDRESS for link local address assignment

[Julien Laganier <julien.laganier.ietf at googlemail.com>]

Folks,

draft-eronen-ipsec-ikev2-ipv6-config-04 introduces the INTERNAL_IP6_LINK 
configuration attribute (below) that provides the client with two 
parameters:

- a Link Identifier used by the client and VPN gateway to identify an 
IPv6 virtual link associated with one or more IKE SAs.

- an IPv6 Interface Identifier used by the client to configure its IPv6 
link-local address.

Since the Interface Identifier is only used to form an IPv6 link-local 
address (non-link-local addresses can be configured from the assigned 
prefixes and any interface identifier) it would be simpler that the 
client's IPv6 link-local address is assigned via the existing 
configuration attribute INTERNAL_IP6_ADDRESS, while the 
INTERNAL_IP6_LINK would contain the Link Identifier only.

What do you think?

--julien

> 7.1.  INTERNAL_IP6_LINK Configuration Attribute
>
>    The INTERNAL_IP6_LINK configuration attribute is formatted as
>    follows:
>
>                         1                   2                   3
>     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>    !R|         Attribute Type      !            Length             |
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>    |                          Link-Local                           |
>    |                         Interface ID                          |
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>    ~                        IKEv2 Link ID                          ~
>    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>
>    o  Reserved (1 bit) - See [IKEv2].
>
>    o  Attribute Type (15 bits) - INTERNAL_IP6_LINK (TBD1).
>
>    o  Length (2 octets) - Length in octets of the Value field (Link-
>       Local Interface ID and IKEv2 Link ID); 8 or more.
>
>    o  Link-Local Interface ID (8 octets) - The Interface ID used for
>       link-local address (by the party that sent this attribute).
>
>    o  IKEv2 Link ID (variable length) - The link ID (may be empty
>       when the client does not yet know the link ID).
_______________________________________________
IPsec mailing list
IPsec at ietf.org
https://www.ietf.org/mailman/listinfo/ipsec