[IPsec] Use of IKE to obtain address of home agent

[<Christian.Kaas-Petersen at tietoenator.com>]

This mail-list is of course not responsible for all uses of the IKE
protocol.  But I wonder if the following case has been or is being
discussed.

3GPP has in document TS 24.302 (can be retrieved from  
http://www.3gpp.org/ftp/Specs/html-info/24302.htm), section 7.2.2, 
specified a use of IKE, where IKE sets up a secure tunnel to 
a security gateway, denoted ePDG, and expects this security gateway 
to return both an address to the mobile node, which normally 
will be a care-of address, and the address(es) of the home agent.
The said document thinks this possible by having two Configuration
Payloads.  IKEv2bis, and previous documents, only indicated one
Configuration Payload to be present, and with the recent discussion
in mind where the order of the payloads in an IKE packet should 
not matter, then having two Configuration Payloads is not a viable 
approach.  It would be better to introduce two new configuration 
attributes, for example named INTERNAL_IP4_HA and INTERNAL_IP6_HA.

Let me know if this has already been discussed.

Christian
_______________________________________________
IPsec mailing list
IPsec at ietf.org
https://www.ietf.org/mailman/listinfo/ipsec