
From Hannes.Tschofenig@gmx.net  Sun Mar  1 05:28:18 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3EE4728C285 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:28:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.283
X-Spam-Level: 
X-Spam-Status: No, score=-2.283 tagged_above=-999 required=5 tests=[AWL=0.316,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ti+cJlmHhhyU for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:28:17 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id D44B328C477 for <dime@ietf.org>; Sun,  1 Mar 2009 05:20:34 -0800 (PST)
Received: (qmail invoked by alias); 01 Mar 2009 13:20:58 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp013) with SMTP; 01 Mar 2009 14:20:58 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18HRcoAYYoHNWhKt5SLQB/jlsfsaEIwOE5wF4QfcS 6n+h7m7EoKaCRK
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <chris.newman@sun.com>
References: <EDC652A26FB23C4EB6384A4584434A0401453A9A@307622ANEX5.global.avaya.com>
Date: Sun, 1 Mar 2009 15:21:58 +0200
Message-ID: <004a01c99a70$b3e6c5b0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <EDC652A26FB23C4EB6384A4584434A0401453A9A@307622ANEX5.global.avaya.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcmX3aR0Y6wvwZimQIujMo9UyRlsxQAGXN1wAJ2/LoA=
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.5600000000000001
Cc: 'Jouni Korhonen' <jouni.korhonen@iki.fi>, dime@ietf.org, elwynd@dial.pipex.com
Subject: Re: [Dime] DISCUSS: draft-ietf-dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 13:28:18 -0000

Hi Chris, 

We have updated the document to address your discuss: 
http://www.tschofenig.priv.at/svn/draft-tschofenig-dime-diameter-qos/draft-i
etf-dime-qos-parameters-10.txt

References have been added to the document as requested. 

Ciao
Hannes

>-----Original Message-----
>From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com] 
>Sent: 26 February, 2009 11:49
>To: jouni korhonen; Jouni Korhonen; Hannes Tschofenig; 
>elwynd@dial.pipex.com
>Cc: dave@frascone.com
>Subject: FW: DISCUSS: draft-ietf-dime-qos-parameters 
>
>Please refer to the DISCUSS below and propose the edits to 
>resolve the lack of references. 
>
>Thanks and Regards,
>
>Dan
>
>
>-----Original Message-----
>From: iesg-bounces@ietf.org [mailto:iesg-bounces@ietf.org] On 
>Behalf Of Chris Newman
>Sent: Thursday, February 26, 2009 8:44 AM
>To: iesg@ietf.org
>Cc: dime-chairs@tools.ietf.org;
>draft-ietf-dime-qos-parameters@tools.ietf.org
>Subject: DISCUSS: draft-ietf-dime-qos-parameters 
>
>Discuss:
>This document has the following flaws:
>
>1. It names the "Diameter" protocol without providing a 
>reference to the protocol specification.
>
>2. This uses a formal grammar to define protocol elements 
>without providing a reference to the definition of the formal grammar.
>
>I believe both problems are resolved by adding the missing 
>normative reference to the Diameter base specification.
>
>


From Hannes.Tschofenig@gmx.net  Sun Mar  1 05:30:32 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CDCD728C1C1 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:30:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.288
X-Spam-Level: 
X-Spam-Status: No, score=-2.288 tagged_above=-999 required=5 tests=[AWL=0.311,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fh8WCU85gWM4 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:30:32 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 3315128C199 for <dime@ietf.org>; Sun,  1 Mar 2009 05:27:59 -0800 (PST)
Received: (qmail invoked by alias); 01 Mar 2009 13:21:43 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp047) with SMTP; 01 Mar 2009 14:21:43 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18hm4R+MrYhy9cFuepITU96Z17H1oTUEkfezyMMKL d/+seYe2eDJ3Wd
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Pasi Eronen'" <pasi.eronen@nokia.com>, <iesg@ietf.org>
References: <20090226112813.F23013A6A71@core3.amsl.com>
Date: Sun, 1 Mar 2009 15:22:44 +0200
Message-ID: <004b01c99a70$cec76b00$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <20090226112813.F23013A6A71@core3.amsl.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcmYBWViXt1dVHYCSv6LbDPmPfAtrgCaTKXg
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.53
Cc: dime@ietf.org, dime-chairs@tools.ietf.org, draft-ietf-dime-qos-parameters@tools.ietf.org
Subject: Re: [Dime] DISCUSS: draft-ietf-dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 13:30:32 -0000

Hi Pasi, 

Thanks for pointing out a bug in these two sections regarding extensibility.
We have updated the draft to address your comments: 
http://www.tschofenig.priv.at/svn/draft-tschofenig-dime-diameter-qos/draft-i
etf-dime-qos-parameters-10.txt

Ciao
Hannes
 
>-----Original Message-----
>From: Pasi Eronen [mailto:pasi.eronen@nokia.com] 
>Sent: 26 February, 2009 13:28
>To: iesg@ietf.org
>Cc: dime-chairs@tools.ietf.org; 
>draft-ietf-dime-qos-parameters@tools.ietf.org
>Subject: DISCUSS: draft-ietf-dime-qos-parameters 
>
>Discuss:
>The text about QoS Profile IDs (in last paragraph of Section 4 
>and Section 5.2) doesn't make sense as is. The intent probably 
>is that the first four octets are an IANA-assigned Enterprise 
>Number, and for the latter four octets, IANA maintains a 
>registry for Enterprise Number 0 (but for other Enterprise 
>Numbers, it's up to the owner how they're used).
>
>But that's not quite what the text currently says (in 4.2, the 
>sentence "If the four octets.." does not parse, and in 5.2, it 
>suddenty starts talking about OIDs ).
>
>Also, what's the IANA assignment policy for numbers 4096..4294967295?
>
>


From Hannes.Tschofenig@gmx.net  Sun Mar  1 05:30:42 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 37ACE28C276 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:30:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.293
X-Spam-Level: 
X-Spam-Status: No, score=-2.293 tagged_above=-999 required=5 tests=[AWL=0.306,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EMGZ17ZcNV8j for <dime@core3.amsl.com>; Sun,  1 Mar 2009 05:30:41 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 121DA28C1CC for <dime@ietf.org>; Sun,  1 Mar 2009 05:28:36 -0800 (PST)
Received: (qmail invoked by alias); 01 Mar 2009 13:28:57 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp027) with SMTP; 01 Mar 2009 14:28:57 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19LQJMhDKFLoLZBamPwuXpaw/i2KSRsetFqZImCfk RCHjSpJUtPovnX
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dward@cisco.com>
References: <EDC652A26FB23C4EB6384A4584434A0401453C46@307622ANEX5.global.avaya.com>
Date: Sun, 1 Mar 2009 15:29:57 +0200
Message-ID: <004c01c99a71$d189a2d0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <EDC652A26FB23C4EB6384A4584434A0401453C46@307622ANEX5.global.avaya.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcmYMWmpcIcM0M9ASCOGqe/kUK5EygCPW2Zg
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.52
Cc: 'Jouni Korhonen' <jouni.korhonen@iki.fi>, dime@ietf.org, elwynd@dial.pipex.com
Subject: Re: [Dime] One more DISCUSS on dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 13:30:42 -0000

Hi Dave, 

Thank you for your review. 

> David Ward:
> Discuss:
> [2009-02-26] Fundamentally this seems to be an interface for 
> configuring a 2 rate 3-color marker and other QoS behavior.

Additionally, I have to mention that AAA protocols provide more
capabilities, including accounting for resource usage and authorization. 

> I don't 
> understand why the policer is defined in absolute bandwidth in this 
> draft and doesn't include percentage.

Because it matches the generic specifier in RFC 2215.  Nobody had
requirements for expressing percentage values. Are there QoS specifiers
based on percentage defined somewhere in current RFCs?


>  Also on the usage of Bandwidth AVP, is it merely a
> different unit of measurement from the Rate parameter in the TMOD AVP ?
> It would be good to clarify.

No, it is the same unit but is intended to be used in a separate context.
Arguably you could use the same AVP but the feedback we got was to keep the
semantic as simple as possible to make the life for those who use the system
easier. Given that there is no shortage of AVPs in Diameter we did not see a
problem with this approach. 

> 
> For the Priority AVP, is it to be used with RSVP for on-path CAC or 
> for local CAC decision or something else?  It would be good to provide 
> some background information in the draft.
> 
Diameter (and RADIUS for that matter) don't care too much where the
information actually came from. It could be a link layer protocol, some
configuration mechanism or also RSVP/NSIS. 

This draft defines the parameters and there is a separate document
(http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-attributes-11.txt)
that discusses the usage of the QoS parameters in context of Diameter AVP,
without going too much into details on what the AAA server could do with
each parameter. There are typically many options, such as logging,
accounting, authorization, statistical analysis, charging, etc. Btw, more
information regarding the priority element is provided in RFC 3181.

I hope I was able to address your questions. 

Ciao
Hannes

>-----Original Message-----
>From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com] 
>Sent: 26 February, 2009 18:44
>To: jouni korhonen; Jouni Korhonen; Hannes Tschofenig; 
>elwynd@dial.pipex.com
>Cc: dave@frascone.com
>Subject: One more DISCUSS on dime-qos-parameters
>
>Please address this DISCUSS as well. 
>
>Dan
>
>
>David Ward:
>Discuss:
>[2009-02-26] Fundamentally this seems to be an interface for 
>configuring a 2 rate 3-color marker and other QoS behavior. I 
>don't understand why the policer is defined in absolute 
>bandwidth in this draft and doesn't include percentage. Also 
>on the usage of Bandwidth AVP, is it merely a different unit 
>of measurement from the Rate parameter in the TMOD AVP ?
>It would be good to clarify.
>
>For the Priority AVP, is it to be used with RSVP for on-path 
>CAC or for local CAC decision or something else?  It would be 
>good to provide some background information in the draft.
>


From dromasca@avaya.com  Sun Mar  1 06:04:01 2009
Return-Path: <dromasca@avaya.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 177D23A67B3 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 06:04:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.51
X-Spam-Level: 
X-Spam-Status: No, score=-2.51 tagged_above=-999 required=5 tests=[AWL=0.088,  BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wo3YuK7WPg8M for <dime@core3.amsl.com>; Sun,  1 Mar 2009 06:04:00 -0800 (PST)
Received: from nj300815-nj-outbound.net.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 43AB63A6A8C for <dime@ietf.org>; Sun,  1 Mar 2009 06:03:56 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,284,1233550800";  d="scan'208,217";a="153830324"
Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.net.avaya.com with ESMTP; 01 Mar 2009 09:04:09 -0500
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 01 Mar 2009 09:04:09 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C99A76.8D66E146"
Date: Sun, 1 Mar 2009 15:03:51 +0100
Message-ID: <EDC652A26FB23C4EB6384A4584434A0401453EE6@307622ANEX5.global.avaya.com>
In-Reply-To: <005301c9998a$03eba040$7b27460a@china.huawei.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Comments on RFC3588bis
Thread-Index: AcmZigPfw3ZQR/rXRsqe9mSq7RK14gA5/FVg
References: <005301c9998a$03eba040$7b27460a@china.huawei.com>
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: "Fortune HUANG" <fqhuang@huawei.com>, <dime@ietf.org>
Subject: Re: [Dime] Comments on RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 14:04:01 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99A76.8D66E146
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

Hi Fortune,
=20
The DIME working group is working under a charter that includes
maintenance and extensions of the Diameter base protocol for specific
AAA applications.=20
A change in the scope of the Diameter base protocol seems to me to be
beyond what the WG is chartered to do at this point in time. If you
believe that an extension of the scope of Diameter is necessary you need
to came with a separate proposal, as this looks like a change of charter
or maybe the charter of another working group.=20
=20
Dan
=20



________________________________

	From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
Behalf Of Fortune HUANG
	Sent: Saturday, February 28, 2009 11:51 AM
	To: dime@ietf.org
	Subject: [Dime] Comments on RFC3588bis
=09
=09
	Hi all,
	=20
	With the wide use in multiple applications, I think nowadays the
Diameter protocol should not be considered as only a AAA protocol. Many
of the Diameter applications have nothing to do with the Authentication,
Authorization and Accounting, although the AAA applications are some of
the important applications. Therefore, I propose we revise RFC3588bis to
reflect this fact.
	=20
	Take the definitions in section 1.3 for example.
	=20
	"   Diameter Client
	=20
	      A Diameter Client is a device at the edge of the network
that
	      performs access control.  ...
	...
	=20
	Diameter Server=20
	=20
	      A Diameter Server is one that handles authentication,
	      authorization and accounting requests for a particular
realm.  ..."
	=20
	For an non-AAA application, these defintions are not precise at
all.=20
	=20
	=20
	Best Regards,
	Fortune
	=20


------_=_NextPart_001_01C99A76.8D66E146
Content-Type: text/html;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.3492" name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>Hi Fortune,</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM></EM></STRONG></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>The DIME&nbsp;working group is working under a =
charter=20
that&nbsp;includes maintenance and extensions of the Diameter base =
protocol for=20
specific &nbsp;AAA applications. </EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>A change in the scope of the Diameter base protocol =
seems to=20
me to be beyond what the WG is chartered to do at this point in time. If =
you=20
believe that an extension of the scope of Diameter is necessary you need =
to came=20
with a separate proposal, as this looks like a change of charter or =
maybe the=20
charter of another working group. </EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D287593013-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2></FONT></EM></STRONG></SPAN><SPAN =
class=3D287593013-01032009><FONT=20
face=3DArial color=3D#0000ff=20
size=3D2><STRONG><EM></EM></STRONG></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>Dan</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D287593013-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM></EM></STRONG>&nbsp;</DIV></FONT></SPAN><STRONG><EM>=
<FONT=20
face=3DArial color=3D#0000ff size=3D2></FONT></EM></STRONG><BR>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">
  <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
  <HR tabIndex=3D-1>
  <FONT face=3DTahoma size=3D2><B>From:</B> dime-bounces@ietf.org=20
  [mailto:dime-bounces@ietf.org] <B>On Behalf Of </B>Fortune=20
  HUANG<BR><B>Sent:</B> Saturday, February 28, 2009 11:51 =
AM<BR><B>To:</B>=20
  dime@ietf.org<BR><B>Subject:</B> [Dime] Comments on=20
  RFC3588bis<BR></FONT><BR></DIV>
  <DIV></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT size=3D2>Hi =
all,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT size=3D2>With the wide use =
in multiple=20
  applications, I think nowadays the Diameter protocol should&nbsp;not =
be=20
  considered&nbsp;as only&nbsp;a AAA protocol.&nbsp;Many of the Diameter =

  applications have nothing to do with the Authentication, Authorization =
and=20
  Accounting, although the AAA applications are some of the important=20
  applications. </FONT></SPAN><SPAN class=3D352381009-28022009><FONT=20
  size=3D2>Therefore, I propose we revise RFC3588bis to reflect this=20
  fact.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT size=3D2>Take the =
definitions in=20
  section 1.3 for example.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009></SPAN><SPAN=20
  class=3D352381009-28022009><FONT size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2>"</FONT></SPAN><FONT=20
  size=3D2>&nbsp;&nbsp; Diameter Client</FONT></DIV>
  <DIV>&nbsp;</DIV>
  <DIV><FONT size=3D2>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A Diameter Client =
is a device=20
  at the edge of the network that<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
performs=20
  access control.&nbsp;&nbsp;<SPAN=20
  class=3D352381009-28022009>...</SPAN></FONT></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2>...</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><FONT size=3D2>Diameter Server</FONT>=20
  <DIV><FONT size=3D2></FONT>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT=20
  size=3D2>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A Diameter Server is one that =
handles=20
  authentication,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; authorization and =
accounting=20
  requests for a particular realm.&nbsp; ..."</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT size=3D2>For an non-AAA =
application,=20
  these defintions are not precise at all. </FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT size=3D2>Best=20
  Regards,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT =
size=3D2>Fortune</FONT></SPAN></DIV>
  <DIV><SPAN class=3D352381009-28022009><FONT=20
  size=3D2></FONT></SPAN>&nbsp;</DIV></DIV></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C99A76.8D66E146--

From dromasca@avaya.com  Sun Mar  1 07:00:18 2009
Return-Path: <dromasca@avaya.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5BF183A6B14 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 07:00:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.069
X-Spam-Level: 
X-Spam-Status: No, score=-2.069 tagged_above=-999 required=5 tests=[AWL=-0.355, BAYES_00=-2.599, HTML_FONT_FACE_BAD=0.884, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JH0RoPx4ZdYP for <dime@core3.amsl.com>; Sun,  1 Mar 2009 07:00:11 -0800 (PST)
Received: from nj300815-nj-outbound.net.avaya.com (nj300815-nj-outbound.net.avaya.com [198.152.12.100]) by core3.amsl.com (Postfix) with ESMTP id 361DA3A6ABF for <dime@ietf.org>; Sun,  1 Mar 2009 07:00:11 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,285,1233550800";  d="scan'208,217";a="153832145"
Received: from unknown (HELO nj300815-nj-erheast.avaya.com) ([198.152.6.5]) by nj300815-nj-outbound.net.avaya.com with ESMTP; 01 Mar 2009 10:00:35 -0500
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by nj300815-nj-erheast-out.avaya.com with ESMTP; 01 Mar 2009 10:00:35 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C99A7E.75639041"
Date: Sun, 1 Mar 2009 16:00:26 +0100
Message-ID: <EDC652A26FB23C4EB6384A4584434A0401453F03@307622ANEX5.global.avaya.com>
In-Reply-To: <002701c99a7c$d3cb5470$9001a8c0@xxxx87e842e29b>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Comments on RFC3588bis
Thread-Index: AcmZigPfw3ZQR/rXRsqe9mSq7RK14gA5/FVgAAH4gLAAANEA0A==
References: <EDC652A26FB23C4EB6384A4584434A0401453EE6@307622ANEX5.global.avaya.com> <002701c99a7c$d3cb5470$9001a8c0@xxxx87e842e29b>
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: "Fortune HUANG" <fqhuang@huawei.com>, <dime@ietf.org>
Subject: Re: [Dime] Comments on RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 15:00:18 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99A7E.75639041
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

Hi Fortune,
=20
RFC 3588 Abstract starts with:=20
=20
> The Diameter base protocol is intended to provide an Authentication,
   Authorization and Accounting (AAA) framework for applications such as
   network access or IP mobility.=20
=20
DIME is chartered with extending Diameter within the scope of 3588 and
not beyond.  Non-AAA applications are beyond the scope.=20
=20
I read the phrase that you quote from the DIME charter as allowing to
consider applications other than IP telephony and LAN AAA, but you still
need to be within the scope of RFC 3588.
=20
If you want to discuss further extensions of the scope of Diameter you
need a WG rechartering or another WG.=20
=20
Regards,
=20
Dan
=20
=20
=20


________________________________

	From: Fortune HUANG [mailto:fqhuang@huawei.com]=20
	Sent: Sunday, March 01, 2009 4:49 PM
	To: Romascanu, Dan (Dan); dime@ietf.org
	Subject: RE: [Dime] Comments on RFC3588bis
=09
=09

	Hi Dan,

	=20

	Thank you very much for your advice. But before moving forward
with your guidance, please allow me ask you a question in order to get
rid of my doubt.

	=20

	On the website of the DIME WG (i.e.
http://www.ietf.org/html.charters/dime-charter.html), I found the
following statement in the charter.

	=20

	"The Diameter Maintanence and Extensions WG will focus on
maintenance and extensions to the Diameter protocol required to enable
its use in applications such as IP telephony and Local Area Network
authentication, authorization and accounting."

	=20

	On reading this sentence, I think the AAA applications are only
the example applications for DIME WG. I can't find any clue that the non
AAA applications are outside the scope of DIME WG.=20

	Did I understand the charter incorrectly at this point? Or did I
not get the right version of the charter? Thanks.

	=20

	Best Regards,

	Fortune=20

	=20

	=20

=09
________________________________


	From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com]=20
	Sent: Sunday, March 01, 2009 10:04 PM
	To: Fortune HUANG; dime@ietf.org
	Subject: RE: [Dime] Comments on RFC3588bis

	=20

	Hi Fortune,

	=20

	The DIME working group is working under a charter that includes
maintenance and extensions of the Diameter base protocol for specific
AAA applications.=20

	A change in the scope of the Diameter base protocol seems to me
to be beyond what the WG is chartered to do at this point in time. If
you believe that an extension of the scope of Diameter is necessary you
need to came with a separate proposal, as this looks like a change of
charter or maybe the charter of another working group.=20

	=20

	Dan

	=20

		=20

	=09
________________________________


		From: dime-bounces@ietf.org
[mailto:dime-bounces@ietf.org] On Behalf Of Fortune HUANG
		Sent: Saturday, February 28, 2009 11:51 AM
		To: dime@ietf.org
		Subject: [Dime] Comments on RFC3588bis

		Hi all,

		=20

		With the wide use in multiple applications, I think
nowadays the Diameter protocol should not be considered as only a AAA
protocol. Many of the Diameter applications have nothing to do with the
Authentication, Authorization and Accounting, although the AAA
applications are some of the important applications. Therefore, I
propose we revise RFC3588bis to reflect this fact.

		=20

		Take the definitions in section 1.3 for example.

		=20

		"   Diameter Client

		=20

		      A Diameter Client is a device at the edge of the
network that
		      performs access control.  ...

		...

		=20

		Diameter Server=20

		=20

		      A Diameter Server is one that handles
authentication,
		      authorization and accounting requests for a
particular realm.  ..."

		=20

		For an non-AAA application, these defintions are not
precise at all.=20

		=20

		=20

		Best Regards,

		Fortune

		=20


------_=_NextPart_001_01C99A7E.75639041
Content-Type: text/html;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:v =3D=20
"urn:schemas-microsoft-com:vml" xmlns:o =3D=20
"urn:schemas-microsoft-com:office:office" xmlns:w =3D=20
"urn:schemas-microsoft-com:office:word" xmlns:st1 =3D=20
"urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.3492" name=3DGENERATOR><!--[if !mso]>
<STYLE>v\:* {
	BEHAVIOR: url(#default#VML)
}
o\:* {
	BEHAVIOR: url(#default#VML)
}
w\:* {
	BEHAVIOR: url(#default#VML)
}
.shape {
	BEHAVIOR: url(#default#VML)
}
</STYLE>
<![endif]--><o:SmartTagType name=3D"PersonName"=20
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"></o:SmartTagT=
ype><!--[if !mso]>
<STYLE>st1\:* {
	BEHAVIOR: url(#default#ieooui)
}
</STYLE>
<![endif]-->
<STYLE>@font-face {
	font-family: SimSun;
}
@font-face {
	font-family: Tahoma;
}
@font-face {
	font-family: SimSun;
}
@page Section1 {size: 595.3pt 841.9pt; margin: 72.0pt 90.0pt 72.0pt =
90.0pt; }
P.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
	COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
	COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
	COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
	COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle19 {
	COLOR: navy; FONT-FAMILY: Arial; mso-style-type: personal-reply
}
DIV.Section1 {
	page: Section1
}
</STYLE>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=3DZH-CN vLink=3Dpurple link=3Dblue>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>Hi Fortune,</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM></EM></STRONG></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>RFC 3588 Abstract starts with:=20
</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM></EM></STRONG></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial><FONT =
color=3D#0000ff=20
size=3D2><STRONG><EM>&gt; </EM></STRONG></FONT><FONT color=3D#0000ff=20
size=3D2><STRONG><EM>The Diameter base protocol is intended to provide =
an=20
Authentication,<BR>&nbsp;&nbsp; Authorization and Accounting (AAA) =
framework for=20
applications such as<BR>&nbsp;&nbsp; network access or IP mobility.=20
</EM></STRONG></FONT></FONT></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM></EM></STRONG></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><FONT face=3DArial color=3D#0000ff =

size=3D2><STRONG><EM>DIME is chartered with extending Diameter within =
the scope of=20
3588 and not beyond.&nbsp; Non-AAA applications are beyond the scope.=20
</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2></FONT></EM></STRONG></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>I read the phrase that you quote from the DIME charter as =
allowing to=20
consider applications other than IP telephony and LAN AAA, but you still =
need to=20
be&nbsp;within the scope of RFC 3588.</FONT></EM></STRONG></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2></FONT></EM></STRONG></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>If you want to discuss&nbsp;further extensions&nbsp;of the =
scope of=20
Diameter you need&nbsp;a WG rechartering or another=20
WG.&nbsp;</FONT></EM></STRONG></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2></FONT></EM></STRONG></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>Regards,</FONT></EM></STRONG></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><STRONG><EM><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>Dan</FONT></EM></STRONG></SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009>&nbsp;</SPAN></DIV>
<DIV><SPAN class=3D493475014-01032009><FONT =
face=3DArial></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D493475014-01032009><FONT=20
face=3DArial></FONT></SPAN>&nbsp;</DIV><BR>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">
  <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
  <HR tabIndex=3D-1>
  <FONT face=3DTahoma size=3D2><B>From:</B> Fortune HUANG=20
  [mailto:fqhuang@huawei.com] <BR><B>Sent:</B> Sunday, March 01, 2009 =
4:49=20
  PM<BR><B>To:</B> Romascanu, Dan (Dan); =
dime@ietf.org<BR><B>Subject:</B> RE:=20
  [Dime] Comments on RFC3588bis<BR></FONT><BR></DIV>
  <DIV></DIV>
  <DIV class=3DSection1>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">Hi=20
  Dan,<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">Thank you =
very much=20
  for your advice. But before moving forward with your guidance, please =
allow me=20
  ask you a question in order to get rid of my=20
  doubt.<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">On the =
website of the=20
  DIME WG (i.e. http://www.ietf.org/html.charters/dime-charter.html), I =
found=20
  the following statement in the charter.<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3D&#23435;&#20307; color=3Dnavy =
size=3D1><SPAN=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
SimSun">&#8220;</SPAN></FONT><FONT=20
  face=3DArial color=3Dnavy size=3D1><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">The Diameter =

  Maintanence and Extensions WG will focus on maintenance and extensions =
to the=20
  Diameter protocol required to enable its use in applications such as =
IP=20
  telephony and Local Area Network authentication, authorization and=20
  accounting.&#8221;<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">On reading =
this=20
  sentence, I think the AAA applications are only the example =
applications for=20
  DIME WG. I can&#8217;t find any clue that the non AAA applications are =
outside the=20
  scope of DIME WG. <o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">Did I =
understand the=20
  charter incorrectly at this point? Or did I not get the right version =
of the=20
  charter? Thanks.<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">Best=20
  Regards,<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: Arial">Fortune=20
  <o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dnavy size=3D1><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 9pt; COLOR: navy; FONT-FAMILY: =
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <DIV>
  <DIV class=3DMsoNormal style=3D"TEXT-ALIGN: center" =
align=3Dcenter><FONT=20
  face=3D"Times New Roman" size=3D3><SPAN lang=3DEN-US =
style=3D"FONT-SIZE: 12pt">
  <HR tabIndex=3D-1 align=3Dcenter width=3D"100%" SIZE=3D2>
  </SPAN></FONT></DIV>
  <P class=3DMsoNormal><B><FONT face=3DTahoma size=3D2><SPAN =
lang=3DEN-US=20
  style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: =
Tahoma">From:</SPAN></FONT></B><FONT=20
  face=3DTahoma size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> Romascanu, Dan (Dan)=20
  [mailto:dromasca@avaya.com] <BR><B><SPAN=20
  style=3D"FONT-WEIGHT: bold">Sent:</SPAN></B> Sunday, March 01, 2009 =
10:04=20
  PM<BR><B><SPAN style=3D"FONT-WEIGHT: bold">To:</SPAN></B> =
<st1:PersonName=20
  w:st=3D"on" ProductID=3D"Fortune HUANG">Fortune =
HUANG</st1:PersonName>;=20
  dime@ietf.org<BR><B><SPAN style=3D"FONT-WEIGHT: =
bold">Subject:</SPAN></B> RE:=20
  [Dime] Comments on RFC3588bis</SPAN></FONT><SPAN=20
  lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
  <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 12pt"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <DIV>
  <P class=3DMsoNormal><EM><B><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN=20
  lang=3DEN-US=20
  style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">Hi=20
  Fortune,</SPAN></FONT></I></B></EM><SPAN=20
  lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
  <DIV>
  <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
  <DIV>
  <P class=3DMsoNormal><EM><B><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN=20
  lang=3DEN-US=20
  style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">The=20
  DIME&nbsp;working group is working under a charter that&nbsp;includes=20
  maintenance and extensions of the Diameter base protocol for specific=20
  &nbsp;AAA applications. </SPAN></FONT></I></B></EM><SPAN=20
  lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
  <DIV>
  <P class=3DMsoNormal><EM><B><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN=20
  lang=3DEN-US=20
  style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">A=20
  change in the scope of the Diameter base protocol seems to me to be =
beyond=20
  what the WG is chartered to do at this point in time. If you believe =
that an=20
  extension of the scope of Diameter is necessary you need to came with =
a=20
  separate proposal, as this looks like a change of charter or maybe the =
charter=20
  of another working group. </SPAN></FONT></I></B></EM><SPAN=20
  lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
  <DIV>
  <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
  <DIV>
  <P class=3DMsoNormal><EM><B><I><FONT face=3DArial color=3Dblue =
size=3D2><SPAN=20
  lang=3DEN-US=20
  style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">Dan</SPAN></FONT></I></B></EM><SPAN=20
  lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
  <DIV>
  <P class=3DMsoNormal><FONT face=3DArial color=3Dblue size=3D2><SPAN =
lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; COLOR: blue; FONT-FAMILY: =
Arial">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
  <BLOCKQUOTE=20
  style=3D"BORDER-RIGHT: medium none; PADDING-RIGHT: 0cm; BORDER-TOP: =
medium none; PADDING-LEFT: 4pt; PADDING-BOTTOM: 0cm; MARGIN: 5pt 0cm 5pt =
3.75pt; BORDER-LEFT: blue 1.5pt solid; PADDING-TOP: 0cm; BORDER-BOTTOM: =
medium none">
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt"><o:p>&nbsp;</o:p></SPAN></FONT></P>
    <DIV class=3DMsoNormal style=3D"TEXT-ALIGN: center" =
align=3Dcenter><FONT=20
    face=3D"Times New Roman" size=3D3><SPAN lang=3DEN-US =
style=3D"FONT-SIZE: 12pt">
    <HR tabIndex=3D-1 align=3Dcenter width=3D"100%" SIZE=3D2>
    </SPAN></FONT></DIV>
    <P class=3DMsoNormal style=3D"MARGIN-BOTTOM: 12pt"><B><FONT =
face=3DTahoma=20
    size=3D2><SPAN lang=3DEN-US=20
    style=3D"FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: =
Tahoma">From:</SPAN></FONT></B><FONT=20
    face=3DTahoma size=3D2><SPAN lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> =
dime-bounces@ietf.org=20
    [mailto:dime-bounces@ietf.org] <B><SPAN style=3D"FONT-WEIGHT: =
bold">On Behalf=20
    Of </SPAN></B><st1:PersonName w:st=3D"on" ProductID=3D"Fortune =
HUANG">Fortune=20
    HUANG</st1:PersonName><BR><B><SPAN=20
    style=3D"FONT-WEIGHT: bold">Sent:</SPAN></B> Saturday, February 28, =
2009 11:51=20
    AM<BR><B><SPAN style=3D"FONT-WEIGHT: bold">To:</SPAN></B>=20
    dime@ietf.org<BR><B><SPAN style=3D"FONT-WEIGHT: =
bold">Subject:</SPAN></B>=20
    [Dime] Comments on RFC3588bis</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">Hi all,</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">With the wide use in multiple =
applications, I think=20
    nowadays the Diameter protocol should&nbsp;not be considered&nbsp;as =

    only&nbsp;a AAA protocol.&nbsp;Many of the Diameter applications =
have=20
    nothing to do with the Authentication, Authorization and Accounting, =

    although the AAA applications are some of the important =
applications.=20
    Therefore, I propose we revise RFC3588bis to reflect this=20
    fact.</SPAN></FONT><SPAN lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">Take the definitions in section 1.3 for=20
    example.</SPAN></FONT><SPAN =
lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">"&nbsp;&nbsp; Diameter =
Client</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A Diameter =
Client is=20
    a device at the edge of the network =
that<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
    performs access control.&nbsp;&nbsp;...</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">...</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">Diameter Server</SPAN></FONT><SPAN =
lang=3DEN-US>=20
    <o:p></o:p></SPAN></P>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A Diameter =
Server is=20
    one that handles authentication,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
    authorization and accounting requests for a particular realm.&nbsp;=20
    ..."</SPAN></FONT><SPAN lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">For an non-AAA application, these =
defintions are not=20
    precise at all. </SPAN></FONT><SPAN =
lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">Best Regards,</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D2><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: 10pt">Fortune</SPAN></FONT><SPAN=20
    lang=3DEN-US><o:p></o:p></SPAN></P></DIV>
    <DIV>
    <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN =
lang=3DEN-US=20
    style=3D"FONT-SIZE: =
12pt">&nbsp;<o:p></o:p></SPAN></FONT></P></DIV></DIV></BLOCKQUOTE></DIV><=
/BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C99A7E.75639041--

From Hannes.Tschofenig@gmx.net  Sun Mar  1 07:16:56 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D3A403A68F6 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 07:16:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.298
X-Spam-Level: 
X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[AWL=0.301,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TBut-BVRUoA4 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 07:16:55 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 0DB053A67F5 for <dime@ietf.org>; Sun,  1 Mar 2009 07:16:54 -0800 (PST)
Received: (qmail invoked by alias); 01 Mar 2009 15:17:18 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp058) with SMTP; 01 Mar 2009 16:17:18 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19ULeAvdcFUmUCg5UrW/bP7jzRdqLCiC2dCWMf0Mj bXZNkTxFadj88r
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dime@ietf.org>, <magnus.westerlund@ericsson.com>, "'Romascanu, Dan \(Dan\)'" <dromasca@avaya.com>
References: <07c701c99986$73684350$2ab5b70a@nsnintra.net>
Date: Sun, 1 Mar 2009 17:18:18 +0200
Message-ID: <005c01c99a80$f420ee20$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <07c701c99986$73684350$2ab5b70a@nsnintra.net>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQ
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.49
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 15:16:56 -0000

Hi all, 

I just had a chat with Dan and he came up with the following alternative
proposal. 

Instead of referencing draft-ietf-tsvwg-emergency-rsvp-11 normatively we
reference it informatively. How can we make such a simple change? Well. We
really only need a part of the registry in
draft-ietf-tsvwg-emergency-rsvp-11.
Then, we copy the text from the IANA consideration section that creates the
numerical registry corresponding to the registry created by RFC 4412. 

Here are the necessary text changes: 

----------

3.5.  Admission-Priority AVP

   The Admission-Priority AVP (AVP Code TBD) is of type Unsigned32.

OLD: 

   The admission control priority of the flow, in terms of access to
   network bandwidth in order to provide higher probability of call
   completion to selected flows.  Higher values represent higher
   priority.  Section 3.1 of
   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter)
   illustrates how these values are carried in RSVP. 

NEW: 

   The admission control priority of the flow, in terms of access to
   network bandwidth in order to provide higher probability of call
   completion to selected flows.  Higher values represent higher
   priority.  A given admission priority is encoded in this information
   element using the same value as when encoded in the Admission-
   Priority AVP defined in Section 3.1 of
   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter).

3.6.  ALRP AVP

   The Application-Level Resource Priority (ALRP) AVP is a grouped AVP
   consisting of two AVPs, the ALRP-Namespace and the ALRP-Priority AVP.

OLD:

   A description of the semantic of the parameter values can be found in
   [RFC4412] and in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
   parameter is as follows:

NEW: 

   A description of the semantic of the parameter values can be found in
   [RFC4412]. A description on how to carry the valus within RSVP is 
   provided in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
   parameter is as follows:

                       ALRP  ::= < AVP Header: TBD >
                                 { ALRP-Namespace }
                                 { ALRP-Priority }

3.6.1.  ALRP-Namespace AVP

   The ALRP-Namespace AVP (AVP Code TBD) is of type Unsigned32.

3.6.2.  ALRP-Priority AVP

   The ALRP-Priority AVP (AVP Code TBD) is of type Unsigned32.

OLD:

   [RFC4412] defines a resource priority header and established the
   initial registry.  That registry was later extended by
   [I-D.ietf-tsvwg-emergency-rsvp].

NEW: 

   [RFC4412] defines a resource priority header and established the
   corresponding registry.  That registry was later converted 
   to allow priorities to be expressed via numerical values by
   [I-D.ietf-tsvwg-emergency-rsvp].

----------

ADD to the IANA consideration section: 


----------

ALRP Namespace

   IANA already maintains the
   Resource-Priority Namespaces registry (under the SIP Parameters)
   listing all such namespace.  However, that registry does not
   currently allocate a numerical value to each namespace.  Hence, this
   document requests the IANA to extend the Resource-Priority Namespace
   registry in the following ways:

   o  a new column should be added to the registry

   o  the title of the new column should be "Namespace Numerical Value
      *"

   o  in the Legend, add a line saying "Namespace Numerical Value = the
      unique numerical value identifying the namespace"

   o  add a line at the bottom of the registry stating the following "*
      : [RFCXXX] " where XXX is the RFC number of the present document

   o  allocate an actual numerical value to each namespace in the
      registry and state that value in the new "Namespace numerical
      Value *" column.

   A numerical value should be allocated immediately by IANA to all
   existing namespace.  Then, in the future, IANA should automatically
   allocate a numerical value to any new namespace added to the
   registry.

ALRP Priority

   IANA already maintains the Resource-Priority
   Priority-values registry (under the SIP Parameters) listing all such
   priorities.  However, that registry does not currently allocate a
   numerical value to each priority-value.  Hence, this document
   requests the IANA to extend the Resource-Priority Priority-Values
   registry in the following ways:

   o  for each namespace, the registry should be structured with two
      columns

   o  the title of the first column should read "Priority Values (least
      to greatest)"

   o  the first column should list all the values currently defined in
      the registry (e.g. for the drsn namespace: "routine", "priority",
      "immediate", "flash", "flash-override", "flash-override-override"
      for the drsn namespace)

   o  the title of the second column should read "Priority Numerical
      Value *"

   o  At the bottom of the registry, add a "Legend" with a line saying
      "Priority Numerical Value = the unique numerical value identifying
      the priority within a namespace"

   o  add a line at the bottom of the registry stating the following "*
      : [RFCXXX] " where XXX is the RFC number of the present document

   o  allocate an actual numerical value to each and state that value in
      the new "Priority Numerical Value *" column.

   A numerical value should be allocated immediately by IANA to all
   existing priority.  Then, in the future, IANA should automatically
   allocate a numerical value to any new namespace added to the
   registry.  The numerical value must be unique within each namespace.
   For the initial allocation, within each namespace, values should be
   allocated in decreasing order ending with 0 (so that the greatest
   priority is always allocated value 0).  For example, in the drsn
   namespace, "routine" would be allocated numerical value 5 and "flash-
   override-override" would be allocated numerical value 0.

-----


Ciao
Hannes


 

>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On 
>Behalf Of Hannes Tschofenig
>Sent: 28 February, 2009 11:25
>To: dime@ietf.org
>Subject: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi all, 
>
>we have a normative reference in the Diameter QoS parameter 
>draft 
>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-paramet
>ers-09.txt
>pointing to 
>http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>
>Yesterday, Magnus posted a mail to the TSVWG list that 
>draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of 
>problems getting through the IESG and the document bounced 
>back to the working group. The mail can be found here: 
>http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>
>Now, there is the risk of considerable delay in publication of 
>our Diameter QoS parameter document as it will be blocked (for 
>potentially a long time).
>Since the Diameter QoS attribute and the Diameter QoS 
>application document normatively depend on the QoS parameter 
>document they will be blocked as well. 
>
>So, I have been thinking of what we could do to deal with this 
>issue and here is a proposal to the group. 
>
>***************
>My proposal is to move the priority parameters (Priority AVP, 
>Admission-Priority AVP, and ALRP AVP) into a separate document 
>and to progress them independently to get the main part of the 
>Diameter QoS parameters document finalized. 
>***************
>
>Please let me know if you find this idea acceptable. Please 
>respond as quickly as possible!
>
>Ciao
>Hannes
>
>PS: We would have to find an editor and authors for that the 
>new document that contains the priority parameters but we can 
>worry about that part larter. 
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>


From Hannes.Tschofenig@gmx.net  Sun Mar  1 11:38:47 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 39CED3A6844 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 11:38:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.312
X-Spam-Level: 
X-Spam-Status: No, score=-2.312 tagged_above=-999 required=5 tests=[AWL=0.287,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ge-97xum1lnd for <dime@core3.amsl.com>; Sun,  1 Mar 2009 11:38:46 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id BF2DF3A6359 for <dime@ietf.org>; Sun,  1 Mar 2009 11:38:45 -0800 (PST)
Received: (qmail invoked by alias); 01 Mar 2009 19:39:08 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp054) with SMTP; 01 Mar 2009 20:39:08 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX193Lfon6yx3vRRZxAIoStRLKjUXsxwqagQvfoMho1 GX/SxWvgFufJxR
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'ECRIT'" <ecrit@ietf.org>, "'KEYPROV'" <keyprov@ietf.org>, <dime@ietf.org>
Date: Sun, 1 Mar 2009 21:40:04 +0200
Message-ID: <00ab01c99aa5$88024020$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-index: AcmYSIQ2rlgWDFaARwS44XtqzrJYLwCXO13g
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.57
Subject: [Dime] FW: Initial Version I-D Submission Deadline Extended to March 4, 2009
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Mar 2009 19:38:47 -0000

FYI; more time in case you work on new documents.  

Ciao
Hannes

>-----Original Message-----
>From: wgchairs-bounces@ietf.org 
>[mailto:wgchairs-bounces@ietf.org] On Behalf Of Alexa Morris
>Sent: 26 February, 2009 21:28
>To: ietf-announce@ietf.org; ietf@ietf.org; wgchairs@ietf.org
>Subject: Initial Version I-D Submission Deadline Extended to 
>March 4, 2009
>
>The IESG has extended the deadline for initial version (00) 
>submissions of Internet Drafts by 2 days (48 hours). The new 
>deadline is March 4, 2009 at 1700 Pacific (March 5, 2009 at  
>0100 UTC / GMT) and the extension is for IETF 74 only.  The 
>deadline has been extended due to the copyright legend text 
>alternative being recently finalized, approved and implemented.
>
>Please note that the date for updated I-D versions has NOT 
>been extended, and is still March 9, 2009.
>
>Regards,
>Alexa
>
>-----------
>Alexa Morris / Executive Director / IETF
>48377 Fremont Blvd., Suite 117, Fremont, CA  94538
>Phone: +1.510.492.4089 / Fax: +1.510.492.4001
>Email: amorris@amsl.com
>
>Managed by Association Management Solutions (AMS) Forum 
>Management, Meeting and Event Planning www.amsl.com 
><http://www.amsl.com/>
>


From fqhuang@huawei.com  Sun Mar  1 17:06:38 2009
Return-Path: <fqhuang@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA1C03A6833 for <dime@core3.amsl.com>; Sun,  1 Mar 2009 17:06:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.104
X-Spam-Level: *
X-Spam-Status: No, score=1.104 tagged_above=-999 required=5 tests=[AWL=1.599,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tQtyYIjkn80h for <dime@core3.amsl.com>; Sun,  1 Mar 2009 17:06:37 -0800 (PST)
Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 782583A681D for <dime@ietf.org>; Sun,  1 Mar 2009 17:06:36 -0800 (PST)
Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFU00561TREW2@szxga01-in.huawei.com> for dime@ietf.org; Mon, 02 Mar 2009 09:06:51 +0800 (CST)
Received: from huawei.com ([172.24.1.24]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFU00CCVTREWW@szxga01-in.huawei.com> for dime@ietf.org; Mon, 02 Mar 2009 09:06:50 +0800 (CST)
Received: from h36145c ([10.70.39.123]) by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KFU00BNNTREAP@szxml04-in.huawei.com> for dime@ietf.org; Mon, 02 Mar 2009 09:06:50 +0800 (CST)
Date: Mon, 02 Mar 2009 09:06:50 +0800
From: Fortune HUANG <fqhuang@huawei.com>
In-reply-to: <005c01c99a80$f420ee20$0201a8c0@nsnintra.net>
To: 'Hannes Tschofenig' <Hannes.Tschofenig@gmx.net>, dime@ietf.org, magnus.westerlund@ericsson.com, "'Romascanu, Dan (Dan)'" <dromasca@avaya.com>
Message-id: <002d01c99ad3$2ae99d60$7b27460a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Thread-index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDA=
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Mar 2009 01:06:38 -0000

 Hi Hannes,

I basically support your proposal of referencing referencing
draft-ietf-tsvwg-emergency-rsvp-11 informatively in stead of normatively.
My further question for clarification is: can we just provide a complete and
precise definition to each AVP (e.g. at least what the AVP indicates) in the
section where it is defined, without  redirecting the reader to another
document to get his own version of the definition? 

Best Regards,
Fortune

-----Original Message-----
From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
Hannes Tschofenig
Sent: Sunday, March 01, 2009 11:18 PM
To: dime@ietf.org; magnus.westerlund@ericsson.com; 'Romascanu, Dan (Dan)'
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE

Hi all, 

I just had a chat with Dan and he came up with the following alternative
proposal. 

Instead of referencing draft-ietf-tsvwg-emergency-rsvp-11 normatively we
reference it informatively. How can we make such a simple change? Well. We
really only need a part of the registry in
draft-ietf-tsvwg-emergency-rsvp-11.
Then, we copy the text from the IANA consideration section that creates the
numerical registry corresponding to the registry created by RFC 4412. 

Here are the necessary text changes: 

----------

3.5.  Admission-Priority AVP

   The Admission-Priority AVP (AVP Code TBD) is of type Unsigned32.

OLD: 

   The admission control priority of the flow, in terms of access to
   network bandwidth in order to provide higher probability of call
   completion to selected flows.  Higher values represent higher
   priority.  Section 3.1 of
   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter)
   illustrates how these values are carried in RSVP. 

NEW: 

   The admission control priority of the flow, in terms of access to
   network bandwidth in order to provide higher probability of call
   completion to selected flows.  Higher values represent higher
   priority.  A given admission priority is encoded in this information
   element using the same value as when encoded in the Admission-
   Priority AVP defined in Section 3.1 of
   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter).

3.6.  ALRP AVP

   The Application-Level Resource Priority (ALRP) AVP is a grouped AVP
   consisting of two AVPs, the ALRP-Namespace and the ALRP-Priority AVP.

OLD:

   A description of the semantic of the parameter values can be found in
   [RFC4412] and in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
   parameter is as follows:

NEW: 

   A description of the semantic of the parameter values can be found in
   [RFC4412]. A description on how to carry the valus within RSVP is 
   provided in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
   parameter is as follows:

                       ALRP  ::= < AVP Header: TBD >
                                 { ALRP-Namespace }
                                 { ALRP-Priority }

3.6.1.  ALRP-Namespace AVP

   The ALRP-Namespace AVP (AVP Code TBD) is of type Unsigned32.

3.6.2.  ALRP-Priority AVP

   The ALRP-Priority AVP (AVP Code TBD) is of type Unsigned32.

OLD:

   [RFC4412] defines a resource priority header and established the
   initial registry.  That registry was later extended by
   [I-D.ietf-tsvwg-emergency-rsvp].

NEW: 

   [RFC4412] defines a resource priority header and established the
   corresponding registry.  That registry was later converted 
   to allow priorities to be expressed via numerical values by
   [I-D.ietf-tsvwg-emergency-rsvp].

----------

ADD to the IANA consideration section: 


----------

ALRP Namespace

   IANA already maintains the
   Resource-Priority Namespaces registry (under the SIP Parameters)
   listing all such namespace.  However, that registry does not
   currently allocate a numerical value to each namespace.  Hence, this
   document requests the IANA to extend the Resource-Priority Namespace
   registry in the following ways:

   o  a new column should be added to the registry

   o  the title of the new column should be "Namespace Numerical Value
      *"

   o  in the Legend, add a line saying "Namespace Numerical Value = the
      unique numerical value identifying the namespace"

   o  add a line at the bottom of the registry stating the following "*
      : [RFCXXX] " where XXX is the RFC number of the present document

   o  allocate an actual numerical value to each namespace in the
      registry and state that value in the new "Namespace numerical
      Value *" column.

   A numerical value should be allocated immediately by IANA to all
   existing namespace.  Then, in the future, IANA should automatically
   allocate a numerical value to any new namespace added to the
   registry.

ALRP Priority

   IANA already maintains the Resource-Priority
   Priority-values registry (under the SIP Parameters) listing all such
   priorities.  However, that registry does not currently allocate a
   numerical value to each priority-value.  Hence, this document
   requests the IANA to extend the Resource-Priority Priority-Values
   registry in the following ways:

   o  for each namespace, the registry should be structured with two
      columns

   o  the title of the first column should read "Priority Values (least
      to greatest)"

   o  the first column should list all the values currently defined in
      the registry (e.g. for the drsn namespace: "routine", "priority",
      "immediate", "flash", "flash-override", "flash-override-override"
      for the drsn namespace)

   o  the title of the second column should read "Priority Numerical
      Value *"

   o  At the bottom of the registry, add a "Legend" with a line saying
      "Priority Numerical Value = the unique numerical value identifying
      the priority within a namespace"

   o  add a line at the bottom of the registry stating the following "*
      : [RFCXXX] " where XXX is the RFC number of the present document

   o  allocate an actual numerical value to each and state that value in
      the new "Priority Numerical Value *" column.

   A numerical value should be allocated immediately by IANA to all
   existing priority.  Then, in the future, IANA should automatically
   allocate a numerical value to any new namespace added to the
   registry.  The numerical value must be unique within each namespace.
   For the initial allocation, within each namespace, values should be
   allocated in decreasing order ending with 0 (so that the greatest
   priority is always allocated value 0).  For example, in the drsn
   namespace, "routine" would be allocated numerical value 5 and "flash-
   override-override" would be allocated numerical value 0.

-----


Ciao
Hannes


 

>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of 
>Hannes Tschofenig
>Sent: 28 February, 2009 11:25
>To: dime@ietf.org
>Subject: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi all,
>
>we have a normative reference in the Diameter QoS parameter draft 
>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-paramet
>ers-09.txt
>pointing to
>http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>
>Yesterday, Magnus posted a mail to the TSVWG list that 
>draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems 
>getting through the IESG and the document bounced back to the working 
>group. The mail can be found here:
>http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>
>Now, there is the risk of considerable delay in publication of our 
>Diameter QoS parameter document as it will be blocked (for potentially 
>a long time).
>Since the Diameter QoS attribute and the Diameter QoS application 
>document normatively depend on the QoS parameter document they will be 
>blocked as well.
>
>So, I have been thinking of what we could do to deal with this issue 
>and here is a proposal to the group.
>
>***************
>My proposal is to move the priority parameters (Priority AVP, 
>Admission-Priority AVP, and ALRP AVP) into a separate document and to 
>progress them independently to get the main part of the Diameter QoS 
>parameters document finalized.
>***************
>
>Please let me know if you find this idea acceptable. Please respond as 
>quickly as possible!
>
>Ciao
>Hannes
>
>PS: We would have to find an editor and authors for that the new 
>document that contains the priority parameters but we can worry about 
>that part larter.
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>

_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime


From vfajardo@tari.toshiba.com  Mon Mar  2 06:29:45 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 44F4C3A6821; Mon,  2 Mar 2009 06:29:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.505
X-Spam-Level: 
X-Spam-Status: No, score=-1.505 tagged_above=-999 required=5 tests=[AWL=-1.095, BAYES_00=-2.599, DATE_IN_FUTURE_12_24=2.189]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2A49Lhyb5WOs; Mon,  2 Mar 2009 06:29:41 -0800 (PST)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id C71C53A69FC; Mon,  2 Mar 2009 06:28:34 -0800 (PST)
Received: from [127.0.0.1] (toshi17.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n22EOE7O043340; Mon, 2 Mar 2009 09:24:14 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49AC9EF5.5060508@tari.toshiba.com>
Date: Mon, 02 Mar 2009 22:07:33 -0500
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: OPS ADs <dromasca@avaya.com>, IETF-IESG-Support via RT <iesg-secretary@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: [Dime] PROTO Writeup for draft-ietf-dime-qos-attributes-11.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Mar 2009 14:29:45 -0000

PROTO WRITEUP for draft-ietf-dime-qos-attributes-11.txt
=======================================================
 
   (1.a)  Who is the Document Shepherd for this document?  Has the
          Document Shepherd personally reviewed this version of the
          document and, in particular, does he or she believe this
          version is ready for forwarding to the IESG for publication?
 
The document shepherd is Victor Fajardo. I have personally reviewed the
document and I believe it is ready for publication.
 
   (1.b)  Has the document had adequate review both from key WG members
          and from key non-WG members?  Does the Document Shepherd have
          any concerns about the depth or breadth of the reviews that
          have been performed?
 
This document defines a set of QoS related AVPs that a Diameter application
can use to signal QoS rules and parameters. It is intended to replace the
IPFilterRule AVP defined in RFC3588 and therefore has received extensive
review within the WG. It has also been review by members of TSVWG, 
interested
SDOs requiring Diameter based QoS signaling as well as folks with in-depth
QoS experience.  
 
   (1.c)  Does the Document Shepherd have concerns that the document
          needs more review from a particular or broader perspective,
          e.g., security, operational complexity, someone familiar with
          AAA, internationalization, or XML?
 
There are no concerns with this document.
 
   (1.d)  Does the Document Shepherd have any specific concerns or
          issues with this document that the Responsible Area Director
          and/or the IESG should be aware of?  For example, perhaps he
          or she is uncomfortable with certain parts of the document, or
          has concerns whether there really is a need for it.  In any
          event, if the WG has discussed those issues and has indicated
          that it still wishes to advance the document, detail those
          concerns here.  Has an IPR disclosure related to this document
          been filed?  If so, please include a reference to the
          disclosure and summarize the WG discussion and conclusion on
          this issue.
 
There are no concerns with this document.  
 
   (1.e)  How solid is the WG consensus behind this document?  Does it
          represent the strong concurrence of a few individuals, with
          others being silent, or does the WG as a whole understand and
          agree with it?
 
There is consensus in the WG behind the document. The problem space is
well understood and the solution is acceptable to the WG, as well
as other interested SDOs.
 
   (1.f)  Has anyone threatened an appeal or otherwise indicated extreme
          discontent?  If so, please summarize the areas of conflict in
          separate email messages to the Responsible Area Director.  (It
          should be in a separate email because this questionnaire is
          entered into the ID Tracker.)
 
There is no opposition to this document.
 
   (1.g)  Has the Document Shepherd personally verified that the
          document satisfies all ID nits?  (See
          http://www.ietf.org/ID-Checklist.html and
          http://tools.ietf.org/tools/idnits/.)  Boilerplate checks are
          not enough; this check needs to be thorough.  Has the document
          met all formal review criteria it needs to, such as the MIB
          Doctor, media type, and URI type reviews?  If the document
          does not already indicate its intended status at the top of
          the first page, please indicate the intended status here.

The document does not contain nits.
 
   (1.h)  Has the document split its references into normative and
          informative?  Are there normative references to documents that
          are not ready for advancement or are otherwise in an unclear
          state?  If such normative references exist, what is the
          strategy for their completion?  Are there normative references
          that are downward references, as described in [RFC3967]?  If
          so, list these downward references to support the Area
          Director in the Last Call procedure for them [RFC3967].

The document has been split into normative and informative references.
There are no normative references that are work in progress.  
 
   (1.i)  Has the Document Shepherd verified that the document's IANA
          Considerations section exists and is consistent with the body
          of the document?  If the document specifies protocol
          extensions, are reservations requested in appropriate IANA
          registries?  Are the IANA registries clearly identified?  If
          the document creates a new registry, does it define the
          proposed initial contents of the registry and an allocation
          procedure for future registrations?  Does it suggest a
          reasonable name for the new registry?  See [RFC2434].  If the
          document describes an Expert Review process, has the Document
          Shepherd conferred with the Responsible Area Director so that
          the IESG can appoint the needed Expert during IESG Evaluation?

The document has an IANA considerations section that is consistent with 
the body.
The document only request allocations of AVP codes in the IETF 
namespace. Following
RFC 3588, IETF consensus is required for the block allocations needed in 
this doc.
The consensus process given to this doc by the DIME WG serves as 
consensus for IANA
allocation requirements.
 
   (1.j)  Has the Document Shepherd verified that sections of the
          document that are written in a formal language, such as XML
          code, BNF rules, MIB definitions, etc., validate correctly in
          an automated checker?

The document contains ABNF rules specified in RFC 3588. The ABNF content
has been validated.
 
   (1.k)  The IESG approval announcement includes a Document
          Announcement Write-Up.  Please provide such a Document
          Announcement Write-Up.  Recent examples can be found in the
          "Action" announcements for approved documents.  The approval
          announcement contains the following sections:

   Technical Summary
 
     This document specifies a set of AVPs that is used to carry
     QoS rules and parameters so that a Diameteter application
     that needs QoS support can signal them. Information contained
     in these AVPs are to be interpreted and consumed by QoS classifying
     entities. The Rule-Set AVP is intended to replace the IPFilterRule
     AVP defined in RFC 3588. It provides a clear and more extensible
     format than the original text based approach provided by
     IPFilterRule.

     The AVPs defined in this document are designed to be general
     enough to fit both PUSH and PULL QoS signalling models. The
     document provides examples on how both models are accomplished
     using existing Diameter applications.
 
   Working Group Summary
 
     There was consensus in the WG to publish the document.
 
   Document Quality
 
     The document has been sent for review to TSVWG and RADEXT. This
     document defines a core component of a Network Operators QoS
     architecture and thus have gone through a long review process
     both within DIME WG and outside of it. It has also traversed
     several re-start iteration before its current acceptable state.
 
   Personnel
 
     Victor Fajardo is the document shepherd for this document.

From avi@bridgewatersystems.com  Mon Mar  2 13:41:05 2009
Return-Path: <avi@bridgewatersystems.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 336433A68CD for <dime@core3.amsl.com>; Mon,  2 Mar 2009 13:41:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x1SgpBlJeYMn for <dime@core3.amsl.com>; Mon,  2 Mar 2009 13:41:04 -0800 (PST)
Received: from webmail.bridgewatersystems.com (webmail.bridgewatersystems.com [66.46.199.134]) by core3.amsl.com (Postfix) with ESMTP id 25C863A67F3 for <dime@ietf.org>; Mon,  2 Mar 2009 13:41:04 -0800 (PST)
Received: from exchange02.bridgewatersys.com ([192.168.150.32]) by exchange02.bridgewatersys.com ([192.168.150.32]) with mapi; Mon, 2 Mar 2009 16:41:29 -0500
From: Avi Lior <avi@bridgewatersystems.com>
To: "jouni.nospam@gmail.com" <jouni.nospam@gmail.com>, "Lionel.morand@orange-ftgroup.com" <Lionel.morand@orange-ftgroup.com>, Mark Jones <Mark.Jones@bridgewatersystems.com>, "tena@huawei.com" <tena@huawei.com>
Date: Mon, 2 Mar 2009 16:41:28 -0500
Thread-Topic: Dime NAI Routing
Thread-Index: Acmbf6SLY3h74xbtRZa+ByDyRI10kg==
Message-ID: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_8A8CFE8F89C38B41A749C19328C76D6308CE370C8Dexchange02bri_"
MIME-Version: 1.0
Cc: "dime@ietf.org" <dime@ietf.org>
Subject: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Mar 2009 21:41:05 -0000

--_000_8A8CFE8F89C38B41A749C19328C76D6308CE370C8Dexchange02bri_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

A couple of comments:

1)  The draft should mention something about the presence of Destination-Ho=
st AVP.

The rule for routing is that the Destination-Host AVP is not looked at unti=
l the message reaches the terminal realm as determined by the decorated NAI=
.

2) I dont like the way Destination-Realm is being used.

The draft states that the destination realm is updated on a hop by hop basi=
s together with the decorated NAI.

If an intermediary is not compliant with the scheme presented by this draft=
 it will result in the intermediary consuming the message locally - since t=
he message contains the destination realm equal to its realm.   Thus the me=
ssage is not going to reach the destination.

Instead, I propose that the destination realm should be always set to the t=
erminal realm, thus:

Agents that are compliant with the draft will first look at the NAI to dete=
rmine whether the packet has reached the terminal realm or where it should =
be routed next;

Agents that are not compatible with the draft will use the old rules for ro=
uting and would route the message according to the destination-realm only a=
nd thus the message will reach the final destintaion albeit not necessarily=
 according to the decorated NAI. But at least it would work.


Did I miss anything?



--_000_8A8CFE8F89C38B41A749C19328C76D6308CE370C8Dexchange02bri_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dus-ascii" http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18372"></HEAD>
<BODY>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>A coupl=
e of=20
comments:</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>1)&nbsp=
; The draft=20
should mention something about the presence of Destination-Host=20
AVP.</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>The rul=
e for=20
routing is that the Destination-Host AVP is not looked at until the message=
=20
reaches the terminal realm as determined by the decorated=20
NAI.</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>2) I do=
nt like the=20
way Destination-Realm is being used.</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>The dra=
ft states=20
that the destination realm is updated on a hop by hop basis together with t=
he=20
decorated NAI.</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=3DVerdana><FONT size=3D2><SPAN class=3D802002621-02032009>I=
f an=20
intermediary is not compliant with the scheme presented by this draft it wi=
ll=20
result in the intermediary consuming the message locally - since the messag=
e=20
contains the destination realm equal to its realm.</SPAN>&nbsp;<SPAN=20
class=3D802002621-02032009>&nbsp; Thus the message is not going to reach th=
e=20
destination.</SPAN></FONT></FONT></DIV>
<DIV><FONT face=3DVerdana><FONT size=3D2><SPAN=20
class=3D802002621-02032009></SPAN></FONT></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>Instead=
, I propose=20
that the destination realm should be always set to the terminal realm,=20
thus:</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>Agents =
that are=20
compliant with the draft will first look at the NAI to determine whether th=
e=20
packet has reached the terminal realm or where it should be routed=20
next;</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>Agents =
that are=20
not compatible with the draft will use the old rules for routing and would =
route=20
the message according to the destination-realm only and thus the message wi=
ll=20
reach the final destintaion albeit not necessarily according to the decorat=
ed=20
NAI. But at least it would work.</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN class=3D802002621-02032009>Did I m=
iss=20
anything?</SPAN></FONT></DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2 face=3DVerdana><SPAN=20
class=3D802002621-02032009></SPAN></FONT>&nbsp;</DIV></BODY></HTML>

--_000_8A8CFE8F89C38B41A749C19328C76D6308CE370C8Dexchange02bri_--

From venugr.k@gmail.com  Mon Mar  2 17:51:11 2009
Return-Path: <venugr.k@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A8D4A3A6999 for <dime@core3.amsl.com>; Mon,  2 Mar 2009 17:51:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_32=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W4IacgYFK5DD for <dime@core3.amsl.com>; Mon,  2 Mar 2009 17:51:11 -0800 (PST)
Received: from wf-out-1314.google.com (wf-out-1314.google.com [209.85.200.169]) by core3.amsl.com (Postfix) with ESMTP id EA0443A690B for <dime@ietf.org>; Mon,  2 Mar 2009 17:51:10 -0800 (PST)
Received: by wf-out-1314.google.com with SMTP id 27so2909686wfd.31 for <dime@ietf.org>; Mon, 02 Mar 2009 17:51:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=5Nwg6oJ8Yb3Md03XKjkDI3hpYghL3GJMC1j6pEx4nVw=; b=FY79x0Lv9RgWAO2ZCrDNVhBPzxvc7iefOeUhyjQnh87xklzDtyNvxu2Wo4vvRZHIOC iVMXQgHtLCfSjGHSMXddp4BAJ3mcAGPyn1b1T3Aa+nCl/M8lfcdaWHIv48MQk+dimGtc 3t2ly2XOUTiIptlcXr0wKJQ81PJKOn0idavss=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=ihz5nzNbpEbOA1khDc4k9EXFpSVC5vnEX7K0wPIymvnIAP7bkLQEwruYbcUVHmIoeO T7n4ugzyf6swBZGXw4eev8aZVG6hEtjKiwgmpCtOo2sBJdG0YyW/WmuiMCgAZ7FrVxtv 6yJ90e1FnfIc6Q0s2aImHyDFWRzcwuEeyelmE=
MIME-Version: 1.0
Received: by 10.142.51.4 with SMTP id y4mr3324478wfy.199.1236045097463; Mon,  02 Mar 2009 17:51:37 -0800 (PST)
In-Reply-To: <mailman.568.1222453526.4981.dime@ietf.org>
References: <mailman.568.1222453526.4981.dime@ietf.org>
Date: Tue, 3 Mar 2009 07:21:37 +0530
Message-ID: <d985d64f0903021751w5ac7da5bi6978518d2d060b77@mail.gmail.com>
From: Venu K <venugr.k@gmail.com>
To: dime@ietf.org
Content-Type: multipart/alternative; boundary=000e0cd20d86f5ef7304642d2c22
Subject: Re: [Dime] DiME Digest, Vol 33, Issue 21
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 01:51:11 -0000

--000e0cd20d86f5ef7304642d2c22
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hello Experts,

Is there a way to co-relate  PNR to corresponding SNR,or is there a way to
pass information in SNR andd that is returned back when in PNR is being sent
from HSS.

for eg: inrequest response scenario a Proxy-Info  avp in a request is
returned in the response.


Regards,
Venu

--000e0cd20d86f5ef7304642d2c22
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hello Experts,<br><br>Is there a way to co-relate=A0 PNR to corresponding S=
NR,or is there a way to pass information in SNR andd that is returned back =
when in PNR is being sent from HSS.<br><br>for eg: inrequest response scena=
rio a Proxy-Info=A0 avp in a request is returned in the response. <br>
<br><br>Regards,<br>Venu<br>

--000e0cd20d86f5ef7304642d2c22--

From venugr.k@gmail.com  Mon Mar  2 21:23:34 2009
Return-Path: <venugr.k@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 24F113A6A1F for <dime@core3.amsl.com>; Mon,  2 Mar 2009 21:23:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_32=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AsoAlZ1Y44kL for <dime@core3.amsl.com>; Mon,  2 Mar 2009 21:23:33 -0800 (PST)
Received: from wf-out-1314.google.com (wf-out-1314.google.com [209.85.200.173]) by core3.amsl.com (Postfix) with ESMTP id 8A46C3A6808 for <dime@ietf.org>; Mon,  2 Mar 2009 21:23:33 -0800 (PST)
Received: by wf-out-1314.google.com with SMTP id 27so3000649wfd.31 for <dime@ietf.org>; Mon, 02 Mar 2009 21:24:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=cLYK/I6t98tquUrrPGoeaIf8LTbsPjdp1KJjsxlrXc0=; b=BvoDzqoHIXfevUOgsUXaMNB475pvTeEVVRh2vFMjQTquOSomJ363zUk2QGFJ/TPR1m gLh8yxBcqbvVpP/ZlOx4tHHWuHn1YHFekWTqs0LUnibHlfGcQwAtS+nRHyeYiJ4kXvRd 2mO3gxEOy3dPWn2T0e3JWedz8oZ8QxmaEKgHg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=oVy7/8c6Zr4cOGdWFaOblcMtenn4L/IADC1XYFMkAienwzi2nAp6FN5dvpfYWlNNeq B3K8OOUvsHI0TDDtsv+KfgDAHdjTLle28h1ymGxG1Kskib9YQ00PTCPFvc9LVjytovB1 /eScqiP6eflstbQRNV6d/2UnYxHgJc7WJEmbs=
MIME-Version: 1.0
Received: by 10.142.144.16 with SMTP id r16mr3410280wfd.214.1236057840271;  Mon, 02 Mar 2009 21:24:00 -0800 (PST)
Date: Tue, 3 Mar 2009 10:53:59 +0530
Message-ID: <d985d64f0903022123v6ed05652ke20fc8fb8b58af12@mail.gmail.com>
From: Venu K <venugr.k@gmail.com>
To: dime@ietf.org
Content-Type: multipart/alternative; boundary=000e0cd327467dc0fd046430248e
Subject: [Dime] Co-relate PNR to SNR
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 05:23:34 -0000

--000e0cd327467dc0fd046430248e
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hello Experts,

Is there a way to co-relate  PNR to corresponding SNR,or is there a way to
pass information in SNR andd that is returned back when in PNR is being sent
from HSS.

for eg: inrequest response scenario a Proxy-Info  avp in a request is
returned in the response.


Regards,
Venu

--000e0cd327467dc0fd046430248e
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hello Experts,<br><br>Is there a way to co-relate=A0 PNR to corresponding
SNR,or is there a way to pass information in SNR andd that is returned
back when in PNR is being sent from HSS.<br><br>for eg: inrequest response =
scenario a Proxy-Info=A0 avp in a request is returned in the response. <br>
<br><br>Regards,<br>Venu

--000e0cd327467dc0fd046430248e--

From hannes.tschofenig@nsn.com  Mon Mar  2 21:47:42 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 022BD3A6B28 for <dime@core3.amsl.com>; Mon,  2 Mar 2009 21:47:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.729
X-Spam-Level: 
X-Spam-Status: No, score=-3.729 tagged_above=-999 required=5 tests=[AWL=-1.130, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6vOmLS8RYjCC for <dime@core3.amsl.com>; Mon,  2 Mar 2009 21:47:40 -0800 (PST)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id F1C7B3A6B2C for <dime@ietf.org>; Mon,  2 Mar 2009 21:47:39 -0800 (PST)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n235laMe013942 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 3 Mar 2009 06:47:36 +0100
Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n235lZMx025608; Tue, 3 Mar 2009 06:47:36 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 3 Mar 2009 06:47:35 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 3 Mar 2009 07:47:35 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45011B062A@FIESEXC015.nsn-intra.net>
In-Reply-To: <002d01c99ad3$2ae99d60$7b27460a@china.huawei.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
Thread-Index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDAAKe36wA==
References: <005c01c99a80$f420ee20$0201a8c0@nsnintra.net> <002d01c99ad3$2ae99d60$7b27460a@china.huawei.com>
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "ext Fortune HUANG" <fqhuang@huawei.com>, "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>, <dime@ietf.org>, <magnus.westerlund@ericsson.com>, "Romascanu,Dan (Dan)" <dromasca@avaya.com>
X-OriginalArrivalTime: 03 Mar 2009 05:47:35.0340 (UTC) FILETIME=[8D9A56C0:01C99BC3]
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 05:47:42 -0000

Hi Fortune,=20

> Hi Hannes,
>
>I basically support your proposal of referencing referencing
>draft-ietf-tsvwg-emergency-rsvp-11 informatively in stead of=20
>normatively.

Thanks for your feedback.=20

>My further question for clarification is: can we just provide=20
>a complete and precise definition to each AVP (e.g. at least=20
>what the AVP indicates) in the section where it is defined,=20
>without  redirecting the reader to another document to get his=20
>own version of the definition?=20
I am very reluctant to copy-and-paste text from other RFCs into this
document just to avoid having the reader to fetch other documents. So
far, in all our documents, we have tried to avoid duplication as much as
possible.=20

Ciao
Hannes

>Best Regards,
>Fortune
>
>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
>Behalf Of Hannes Tschofenig
>Sent: Sunday, March 01, 2009 11:18 PM
>To: dime@ietf.org; magnus.westerlund@ericsson.com; 'Romascanu,=20
>Dan (Dan)'
>Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi all,=20
>
>I just had a chat with Dan and he came up with the following=20
>alternative proposal.=20
>
>Instead of referencing draft-ietf-tsvwg-emergency-rsvp-11=20
>normatively we reference it informatively. How can we make=20
>such a simple change? Well. We really only need a part of the=20
>registry in draft-ietf-tsvwg-emergency-rsvp-11.
>Then, we copy the text from the IANA consideration section=20
>that creates the numerical registry corresponding to the=20
>registry created by RFC 4412.=20
>
>Here are the necessary text changes:=20
>
>----------
>
>3.5.  Admission-Priority AVP
>
>   The Admission-Priority AVP (AVP Code TBD) is of type Unsigned32.
>
>OLD:=20
>
>   The admission control priority of the flow, in terms of access to
>   network bandwidth in order to provide higher probability of call
>   completion to selected flows.  Higher values represent higher
>   priority.  Section 3.1 of
>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter)
>   illustrates how these values are carried in RSVP.=20
>
>NEW:=20
>
>   The admission control priority of the flow, in terms of access to
>   network bandwidth in order to provide higher probability of call
>   completion to selected flows.  Higher values represent higher
>   priority.  A given admission priority is encoded in this information
>   element using the same value as when encoded in the Admission-
>   Priority AVP defined in Section 3.1 of
>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter).
>
>3.6.  ALRP AVP
>
>   The Application-Level Resource Priority (ALRP) AVP is a grouped AVP
>   consisting of two AVPs, the ALRP-Namespace and the=20
>ALRP-Priority AVP.
>
>OLD:
>
>   A description of the semantic of the parameter values can=20
>be found in
>   [RFC4412] and in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>   parameter is as follows:
>
>NEW:=20
>
>   A description of the semantic of the parameter values can=20
>be found in
>   [RFC4412]. A description on how to carry the valus within RSVP is=20
>   provided in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>   parameter is as follows:
>
>                       ALRP  ::=3D < AVP Header: TBD >
>                                 { ALRP-Namespace }
>                                 { ALRP-Priority }
>
>3.6.1.  ALRP-Namespace AVP
>
>   The ALRP-Namespace AVP (AVP Code TBD) is of type Unsigned32.
>
>3.6.2.  ALRP-Priority AVP
>
>   The ALRP-Priority AVP (AVP Code TBD) is of type Unsigned32.
>
>OLD:
>
>   [RFC4412] defines a resource priority header and established the
>   initial registry.  That registry was later extended by
>   [I-D.ietf-tsvwg-emergency-rsvp].
>
>NEW:=20
>
>   [RFC4412] defines a resource priority header and established the
>   corresponding registry.  That registry was later converted=20
>   to allow priorities to be expressed via numerical values by
>   [I-D.ietf-tsvwg-emergency-rsvp].
>
>----------
>
>ADD to the IANA consideration section:=20
>
>
>----------
>
>ALRP Namespace
>
>   IANA already maintains the
>   Resource-Priority Namespaces registry (under the SIP Parameters)
>   listing all such namespace.  However, that registry does not
>   currently allocate a numerical value to each namespace.  Hence, this
>   document requests the IANA to extend the Resource-Priority Namespace
>   registry in the following ways:
>
>   o  a new column should be added to the registry
>
>   o  the title of the new column should be "Namespace Numerical Value
>      *"
>
>   o  in the Legend, add a line saying "Namespace Numerical Value =3D =
the
>      unique numerical value identifying the namespace"
>
>   o  add a line at the bottom of the registry stating the following "*
>      : [RFCXXX] " where XXX is the RFC number of the present document
>
>   o  allocate an actual numerical value to each namespace in the
>      registry and state that value in the new "Namespace numerical
>      Value *" column.
>
>   A numerical value should be allocated immediately by IANA to all
>   existing namespace.  Then, in the future, IANA should automatically
>   allocate a numerical value to any new namespace added to the
>   registry.
>
>ALRP Priority
>
>   IANA already maintains the Resource-Priority
>   Priority-values registry (under the SIP Parameters) listing all such
>   priorities.  However, that registry does not currently allocate a
>   numerical value to each priority-value.  Hence, this document
>   requests the IANA to extend the Resource-Priority Priority-Values
>   registry in the following ways:
>
>   o  for each namespace, the registry should be structured with two
>      columns
>
>   o  the title of the first column should read "Priority Values (least
>      to greatest)"
>
>   o  the first column should list all the values currently defined in
>      the registry (e.g. for the drsn namespace: "routine", "priority",
>      "immediate", "flash", "flash-override", "flash-override-override"
>      for the drsn namespace)
>
>   o  the title of the second column should read "Priority Numerical
>      Value *"
>
>   o  At the bottom of the registry, add a "Legend" with a line saying
>      "Priority Numerical Value =3D the unique numerical value=20
>identifying
>      the priority within a namespace"
>
>   o  add a line at the bottom of the registry stating the following "*
>      : [RFCXXX] " where XXX is the RFC number of the present document
>
>   o  allocate an actual numerical value to each and state=20
>that value in
>      the new "Priority Numerical Value *" column.
>
>   A numerical value should be allocated immediately by IANA to all
>   existing priority.  Then, in the future, IANA should automatically
>   allocate a numerical value to any new namespace added to the
>   registry.  The numerical value must be unique within each namespace.
>   For the initial allocation, within each namespace, values should be
>   allocated in decreasing order ending with 0 (so that the greatest
>   priority is always allocated value 0).  For example, in the drsn
>   namespace, "routine" would be allocated numerical value 5=20
>and "flash-
>   override-override" would be allocated numerical value 0.
>
>-----
>
>
>Ciao
>Hannes
>
>
>=20
>
>>-----Original Message-----
>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
>Behalf Of=20
>>Hannes Tschofenig
>>Sent: 28 February, 2009 11:25
>>To: dime@ietf.org
>>Subject: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>>
>>Hi all,
>>
>>we have a normative reference in the Diameter QoS parameter draft=20
>>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-paramet
>>ers-09.txt
>>pointing to
>>http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>>
>>Yesterday, Magnus posted a mail to the TSVWG list that=20
>>draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems=20
>>getting through the IESG and the document bounced back to the working=20
>>group. The mail can be found here:
>>http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>>
>>Now, there is the risk of considerable delay in publication of our=20
>>Diameter QoS parameter document as it will be blocked (for=20
>potentially=20
>>a long time).
>>Since the Diameter QoS attribute and the Diameter QoS application=20
>>document normatively depend on the QoS parameter document=20
>they will be=20
>>blocked as well.
>>
>>So, I have been thinking of what we could do to deal with this issue=20
>>and here is a proposal to the group.
>>
>>***************
>>My proposal is to move the priority parameters (Priority AVP,=20
>>Admission-Priority AVP, and ALRP AVP) into a separate document and to=20
>>progress them independently to get the main part of the Diameter QoS=20
>>parameters document finalized.
>>***************
>>
>>Please let me know if you find this idea acceptable. Please=20
>respond as=20
>>quickly as possible!
>>
>>Ciao
>>Hannes
>>
>>PS: We would have to find an editor and authors for that the new=20
>>document that contains the priority parameters but we can worry about=20
>>that part larter.
>>
>>_______________________________________________
>>DiME mailing list
>>DiME@ietf.org
>>https://www.ietf.org/mailman/listinfo/dime
>>
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>

From jouni.nospam@gmail.com  Tue Mar  3 00:07:36 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A62528C112 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:07:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.034
X-Spam-Level: 
X-Spam-Status: No, score=-2.034 tagged_above=-999 required=5 tests=[AWL=0.565,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x8BpZ-W+5SC3 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:07:35 -0800 (PST)
Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.25]) by core3.amsl.com (Postfix) with ESMTP id 1FC5A28C0F2 for <dime@ietf.org>; Tue,  3 Mar 2009 00:07:34 -0800 (PST)
Received: by ey-out-2122.google.com with SMTP id 25so529193eya.31 for <dime@ietf.org>; Tue, 03 Mar 2009 00:08:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=AkB9aQomK7GLko+0WQiJYcy1L7ucFOwyjygmXHxPceA=; b=sAEyQQKLVAGzqGUZRbLgi+vlpwsIfEUItjEiFyyt7kQvgdfM85V2lb55hTZLP2wlmH VSTpjzAs4a68SkclxE01rR/v6DBtUTGIfyljo4Z0Hekylpc4QMlbqBE4anA6GRJRCzUJ 7PfHNfOWMAQX2miO6uu/pw72c++QNnoi1K/B4=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=OCYxr19/fgclw4qcJoQBfmrO5qXo0K+uNR2Yv4ESAWVXP7HhyA6az3g+zd9ciTY0Zy h4d99nmt/pwjpg/pm6un7ZNrWryY1OplU2ZqMsosTVLJtkm3iXxC/dhpNAZDQe+iprie JTkVyj+qn4HfdBlhetZUUt+RsCACsjamLr3ds=
Received: by 10.216.4.80 with SMTP id 58mr52076wei.173.1236067681064; Tue, 03 Mar 2009 00:08:01 -0800 (PST)
Received: from ?10.183.181.9? ([192.100.124.156]) by mx.google.com with ESMTPS id 5sm5990907eyf.42.2009.03.03.00.08.00 (version=TLSv1/SSLv3 cipher=RC4-MD5); Tue, 03 Mar 2009 00:08:00 -0800 (PST)
Message-Id: <72D5BF85-3093-4781-99CD-9ABC5FAE12E2@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
In-Reply-To: <07c701c99986$73684350$2ab5b70a@nsnintra.net>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Tue, 3 Mar 2009 10:07:58 +0200
References: <07c701c99986$73684350$2ab5b70a@nsnintra.net>
X-Mailer: Apple Mail (2.930.3)
Cc: dime@ietf.org
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 08:07:36 -0000

Hi all,

I would support removing as well. Be done with it and move on with the  
QoS parameter document. Those features that were in the tsvwg document  
can be documented later in a separate document, when and if needed.

Cheers,
	Jouni


On Feb 28, 2009, at 11:25 AM, Hannes Tschofenig wrote:

> Hi all,
>
> we have a normative reference in the Diameter QoS parameter draft
> http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-09.txt
> pointing to http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>
> Yesterday, Magnus posted a mail to the TSVWG list that
> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems  
> getting
> through the IESG and the document bounced back to the working group.  
> The
> mail can be found here:
> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>
> Now, there is the risk of considerable delay in publication of our  
> Diameter
> QoS parameter document as it will be blocked (for potentially a long  
> time).
> Since the Diameter QoS attribute and the Diameter QoS application  
> document
> normatively depend on the QoS parameter document they will be  
> blocked as
> well.
>
> So, I have been thinking of what we could do to deal with this issue  
> and
> here is a proposal to the group.
>
> ***************
> My proposal is to move the priority parameters (Priority AVP,
> Admission-Priority AVP, and ALRP AVP) into a separate document and to
> progress them independently to get the main part of the Diameter QoS
> parameters document finalized.
> ***************
>
> Please let me know if you find this idea acceptable. Please respond as
> quickly as possible!
>
> Ciao
> Hannes
>
> PS: We would have to find an editor and authors for that the new  
> document
> that contains the priority parameters but we can worry about that part
> larter.
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime


From fqhuang@huawei.com  Tue Mar  3 00:21:58 2009
Return-Path: <fqhuang@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 36E9328C10D for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:21:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.259
X-Spam-Level: *
X-Spam-Status: No, score=1.259 tagged_above=-999 required=5 tests=[AWL=1.154,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  J_CHICKENPOX_93=0.6, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QEpV9YJ8fIpP for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:21:57 -0800 (PST)
Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 84AD43A6938 for <dime@ietf.org>; Tue,  3 Mar 2009 00:21:56 -0800 (PST)
Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFX00CKC8L0RL@szxga01-in.huawei.com> for dime@ietf.org; Tue, 03 Mar 2009 16:22:12 +0800 (CST)
Received: from huawei.com ([172.24.1.24]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFX0060D8L019@szxga01-in.huawei.com> for dime@ietf.org; Tue, 03 Mar 2009 16:22:12 +0800 (CST)
Received: from h36145c ([10.70.39.123]) by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KFX00DU68L08B@szxml04-in.huawei.com> for dime@ietf.org; Tue, 03 Mar 2009 16:22:12 +0800 (CST)
Date: Tue, 03 Mar 2009 16:22:12 +0800
From: Fortune HUANG <fqhuang@huawei.com>
In-reply-to: <3D3C75174CB95F42AD6BCC56E5555B45011B062A@FIESEXC015.nsn-intra.net>
To: "'Tschofenig, Hannes (NSN - FI/Espoo)'" <hannes.tschofenig@nsn.com>, 'Hannes Tschofenig' <Hannes.Tschofenig@gmx.net>, dime@ietf.org, magnus.westerlund@ericsson.com, "'Romascanu, Dan (Dan)'" <dromasca@avaya.com>
Message-id: <006b01c99bd9$27290ce0$7b27460a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Thread-index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDAAKe36wAAXy3Qw
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 08:21:58 -0000

Hi Hannes,

But I still think at least we should provide a brief statement about what
the AVP indicates. And I also would like to have the detailed location of
the relevant reference in this draft because it would be painful to go over
another RFC just for the meaning of one AVP.

Best Regards,
Fortune


-----Original Message-----
From: Tschofenig, Hannes (NSN - FI/Espoo) [mailto:hannes.tschofenig@nsn.com]

Sent: Tuesday, March 03, 2009 1:48 PM
To: ext Fortune HUANG; Hannes Tschofenig; dime@ietf.org;
magnus.westerlund@ericsson.com; Romascanu,Dan (Dan)
Subject: RE: [Dime] Diameter QoS Parameter -- DECISION TO MAKE

Hi Fortune, 

> Hi Hannes,
>
>I basically support your proposal of referencing referencing
>draft-ietf-tsvwg-emergency-rsvp-11 informatively in stead of 
>normatively.

Thanks for your feedback. 

>My further question for clarification is: can we just provide a 
>complete and precise definition to each AVP (e.g. at least what the AVP 
>indicates) in the section where it is defined, without  redirecting the 
>reader to another document to get his own version of the definition?
I am very reluctant to copy-and-paste text from other RFCs into this
document just to avoid having the reader to fetch other documents. So far,
in all our documents, we have tried to avoid duplication as much as
possible. 

Ciao
Hannes

>Best Regards,
>Fortune
>
>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of 
>Hannes Tschofenig
>Sent: Sunday, March 01, 2009 11:18 PM
>To: dime@ietf.org; magnus.westerlund@ericsson.com; 'Romascanu, Dan 
>(Dan)'
>Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi all,
>
>I just had a chat with Dan and he came up with the following 
>alternative proposal.
>
>Instead of referencing draft-ietf-tsvwg-emergency-rsvp-11
>normatively we reference it informatively. How can we make such a 
>simple change? Well. We really only need a part of the registry in 
>draft-ietf-tsvwg-emergency-rsvp-11.
>Then, we copy the text from the IANA consideration section that creates 
>the numerical registry corresponding to the registry created by RFC 
>4412.
>
>Here are the necessary text changes: 
>
>----------
>
>3.5.  Admission-Priority AVP
>
>   The Admission-Priority AVP (AVP Code TBD) is of type Unsigned32.
>
>OLD: 
>
>   The admission control priority of the flow, in terms of access to
>   network bandwidth in order to provide higher probability of call
>   completion to selected flows.  Higher values represent higher
>   priority.  Section 3.1 of
>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter)
>   illustrates how these values are carried in RSVP. 
>
>NEW: 
>
>   The admission control priority of the flow, in terms of access to
>   network bandwidth in order to provide higher probability of call
>   completion to selected flows.  Higher values represent higher
>   priority.  A given admission priority is encoded in this information
>   element using the same value as when encoded in the Admission-
>   Priority AVP defined in Section 3.1 of
>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter).
>
>3.6.  ALRP AVP
>
>   The Application-Level Resource Priority (ALRP) AVP is a grouped AVP
>   consisting of two AVPs, the ALRP-Namespace and the ALRP-Priority 
>AVP.
>
>OLD:
>
>   A description of the semantic of the parameter values can be found 
>in
>   [RFC4412] and in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>   parameter is as follows:
>
>NEW: 
>
>   A description of the semantic of the parameter values can be found 
>in
>   [RFC4412]. A description on how to carry the valus within RSVP is 
>   provided in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>   parameter is as follows:
>
>                       ALRP  ::= < AVP Header: TBD >
>                                 { ALRP-Namespace }
>                                 { ALRP-Priority }
>
>3.6.1.  ALRP-Namespace AVP
>
>   The ALRP-Namespace AVP (AVP Code TBD) is of type Unsigned32.
>
>3.6.2.  ALRP-Priority AVP
>
>   The ALRP-Priority AVP (AVP Code TBD) is of type Unsigned32.
>
>OLD:
>
>   [RFC4412] defines a resource priority header and established the
>   initial registry.  That registry was later extended by
>   [I-D.ietf-tsvwg-emergency-rsvp].
>
>NEW: 
>
>   [RFC4412] defines a resource priority header and established the
>   corresponding registry.  That registry was later converted 
>   to allow priorities to be expressed via numerical values by
>   [I-D.ietf-tsvwg-emergency-rsvp].
>
>----------
>
>ADD to the IANA consideration section: 
>
>
>----------
>
>ALRP Namespace
>
>   IANA already maintains the
>   Resource-Priority Namespaces registry (under the SIP Parameters)
>   listing all such namespace.  However, that registry does not
>   currently allocate a numerical value to each namespace.  Hence, this
>   document requests the IANA to extend the Resource-Priority Namespace
>   registry in the following ways:
>
>   o  a new column should be added to the registry
>
>   o  the title of the new column should be "Namespace Numerical Value
>      *"
>
>   o  in the Legend, add a line saying "Namespace Numerical Value = the
>      unique numerical value identifying the namespace"
>
>   o  add a line at the bottom of the registry stating the following "*
>      : [RFCXXX] " where XXX is the RFC number of the present document
>
>   o  allocate an actual numerical value to each namespace in the
>      registry and state that value in the new "Namespace numerical
>      Value *" column.
>
>   A numerical value should be allocated immediately by IANA to all
>   existing namespace.  Then, in the future, IANA should automatically
>   allocate a numerical value to any new namespace added to the
>   registry.
>
>ALRP Priority
>
>   IANA already maintains the Resource-Priority
>   Priority-values registry (under the SIP Parameters) listing all such
>   priorities.  However, that registry does not currently allocate a
>   numerical value to each priority-value.  Hence, this document
>   requests the IANA to extend the Resource-Priority Priority-Values
>   registry in the following ways:
>
>   o  for each namespace, the registry should be structured with two
>      columns
>
>   o  the title of the first column should read "Priority Values (least
>      to greatest)"
>
>   o  the first column should list all the values currently defined in
>      the registry (e.g. for the drsn namespace: "routine", "priority",
>      "immediate", "flash", "flash-override", "flash-override-override"
>      for the drsn namespace)
>
>   o  the title of the second column should read "Priority Numerical
>      Value *"
>
>   o  At the bottom of the registry, add a "Legend" with a line saying
>      "Priority Numerical Value = the unique numerical value 
>identifying
>      the priority within a namespace"
>
>   o  add a line at the bottom of the registry stating the following "*
>      : [RFCXXX] " where XXX is the RFC number of the present document
>
>   o  allocate an actual numerical value to each and state that value 
>in
>      the new "Priority Numerical Value *" column.
>
>   A numerical value should be allocated immediately by IANA to all
>   existing priority.  Then, in the future, IANA should automatically
>   allocate a numerical value to any new namespace added to the
>   registry.  The numerical value must be unique within each namespace.
>   For the initial allocation, within each namespace, values should be
>   allocated in decreasing order ending with 0 (so that the greatest
>   priority is always allocated value 0).  For example, in the drsn
>   namespace, "routine" would be allocated numerical value 5 and 
>"flash-
>   override-override" would be allocated numerical value 0.
>
>-----
>
>
>Ciao
>Hannes
>
>
> 
>
>>-----Original Message-----
>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>Behalf Of
>>Hannes Tschofenig
>>Sent: 28 February, 2009 11:25
>>To: dime@ietf.org
>>Subject: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>>
>>Hi all,
>>
>>we have a normative reference in the Diameter QoS parameter draft 
>>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-paramet
>>ers-09.txt
>>pointing to
>>http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>>
>>Yesterday, Magnus posted a mail to the TSVWG list that 
>>draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems 
>>getting through the IESG and the document bounced back to the working 
>>group. The mail can be found here:
>>http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>>
>>Now, there is the risk of considerable delay in publication of our 
>>Diameter QoS parameter document as it will be blocked (for
>potentially
>>a long time).
>>Since the Diameter QoS attribute and the Diameter QoS application 
>>document normatively depend on the QoS parameter document
>they will be
>>blocked as well.
>>
>>So, I have been thinking of what we could do to deal with this issue 
>>and here is a proposal to the group.
>>
>>***************
>>My proposal is to move the priority parameters (Priority AVP, 
>>Admission-Priority AVP, and ALRP AVP) into a separate document and to 
>>progress them independently to get the main part of the Diameter QoS 
>>parameters document finalized.
>>***************
>>
>>Please let me know if you find this idea acceptable. Please
>respond as
>>quickly as possible!
>>
>>Ciao
>>Hannes
>>
>>PS: We would have to find an editor and authors for that the new 
>>document that contains the priority parameters but we can worry about 
>>that part larter.
>>
>>_______________________________________________
>>DiME mailing list
>>DiME@ietf.org
>>https://www.ietf.org/mailman/listinfo/dime
>>
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>


From hannes.tschofenig@nsn.com  Tue Mar  3 00:28:11 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 530FE3A68A7 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:28:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.382
X-Spam-Level: 
X-Spam-Status: No, score=-3.382 tagged_above=-999 required=5 tests=[AWL=-1.383, BAYES_00=-2.599, J_CHICKENPOX_93=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RYvofEryN5W7 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 00:28:10 -0800 (PST)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 88E8C3A6AA5 for <dime@ietf.org>; Tue,  3 Mar 2009 00:28:09 -0800 (PST)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n238SAEu024267 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 3 Mar 2009 09:28:10 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n238SASo018675; Tue, 3 Mar 2009 09:28:10 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 3 Mar 2009 09:28:10 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 3 Mar 2009 10:29:11 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45011B07FC@FIESEXC015.nsn-intra.net>
In-Reply-To: <006b01c99bd9$27290ce0$7b27460a@china.huawei.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
Thread-Index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDAAKe36wAAXy3QwAAEhKAA=
References: <3D3C75174CB95F42AD6BCC56E5555B45011B062A@FIESEXC015.nsn-intra.net> <006b01c99bd9$27290ce0$7b27460a@china.huawei.com>
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "ext Fortune HUANG" <fqhuang@huawei.com>, "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>, <dime@ietf.org>, <magnus.westerlund@ericsson.com>, "Romascanu,Dan (Dan)" <dromasca@avaya.com>
X-OriginalArrivalTime: 03 Mar 2009 08:28:10.0409 (UTC) FILETIME=[FC8D3190:01C99BD9]
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 08:28:11 -0000

Hi Fortune,=20

>Hi Hannes,
>
>But I still think at least we should provide a brief statement=20
>about what the AVP indicates.

There is a brief statement about the AVPs in the beginning of the
document.=20

>And I also would like to have=20
>the detailed location of the relevant reference in this draft=20
>because it would be painful to go over another RFC just for=20
>the meaning of one AVP.

Well. This is somewhat difficult. Think about DiffServ Code Points.=20
Which part of what document would provide you the information you would
like to know?


Ciao
Hannes

PS: If we follow Jouni's suggestion then the reader has fewer documents
to look at.=20

>
>Best Regards,
>Fortune
>
>
>-----Original Message-----
>From: Tschofenig, Hannes (NSN - FI/Espoo)=20
>[mailto:hannes.tschofenig@nsn.com]
>
>Sent: Tuesday, March 03, 2009 1:48 PM
>To: ext Fortune HUANG; Hannes Tschofenig; dime@ietf.org;=20
>magnus.westerlund@ericsson.com; Romascanu,Dan (Dan)
>Subject: RE: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi Fortune,=20
>
>> Hi Hannes,
>>
>>I basically support your proposal of referencing referencing
>>draft-ietf-tsvwg-emergency-rsvp-11 informatively in stead of=20
>>normatively.
>
>Thanks for your feedback.=20
>
>>My further question for clarification is: can we just provide a=20
>>complete and precise definition to each AVP (e.g. at least=20
>what the AVP
>>indicates) in the section where it is defined, without =20
>redirecting the=20
>>reader to another document to get his own version of the definition?
>I am very reluctant to copy-and-paste text from other RFCs=20
>into this document just to avoid having the reader to fetch=20
>other documents. So far, in all our documents, we have tried=20
>to avoid duplication as much as possible.=20
>
>Ciao
>Hannes
>
>>Best Regards,
>>Fortune
>>
>>-----Original Message-----
>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
>Behalf Of=20
>>Hannes Tschofenig
>>Sent: Sunday, March 01, 2009 11:18 PM
>>To: dime@ietf.org; magnus.westerlund@ericsson.com; 'Romascanu, Dan=20
>>(Dan)'
>>Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>>
>>Hi all,
>>
>>I just had a chat with Dan and he came up with the following=20
>>alternative proposal.
>>
>>Instead of referencing draft-ietf-tsvwg-emergency-rsvp-11
>>normatively we reference it informatively. How can we make such a=20
>>simple change? Well. We really only need a part of the registry in=20
>>draft-ietf-tsvwg-emergency-rsvp-11.
>>Then, we copy the text from the IANA consideration section=20
>that creates=20
>>the numerical registry corresponding to the registry created by RFC=20
>>4412.
>>
>>Here are the necessary text changes:=20
>>
>>----------
>>
>>3.5.  Admission-Priority AVP
>>
>>   The Admission-Priority AVP (AVP Code TBD) is of type Unsigned32.
>>
>>OLD:=20
>>
>>   The admission control priority of the flow, in terms of access to
>>   network bandwidth in order to provide higher probability of call
>>   completion to selected flows.  Higher values represent higher
>>   priority.  Section 3.1 of
>>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter)
>>   illustrates how these values are carried in RSVP.=20
>>
>>NEW:=20
>>
>>   The admission control priority of the flow, in terms of access to
>>   network bandwidth in order to provide higher probability of call
>>   completion to selected flows.  Higher values represent higher
>>   priority.  A given admission priority is encoded in this=20
>information
>>   element using the same value as when encoded in the Admission-
>>   Priority AVP defined in Section 3.1 of
>>   [I-D.ietf-tsvwg-emergency-rsvp] (Admission Priority parameter).
>>
>>3.6.  ALRP AVP
>>
>>   The Application-Level Resource Priority (ALRP) AVP is a grouped AVP
>>   consisting of two AVPs, the ALRP-Namespace and the ALRP-Priority=20
>>AVP.
>>
>>OLD:
>>
>>   A description of the semantic of the parameter values can be found=20
>>in
>>   [RFC4412] and in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>>   parameter is as follows:
>>
>>NEW:=20
>>
>>   A description of the semantic of the parameter values can be found=20
>>in
>>   [RFC4412]. A description on how to carry the valus within RSVP is=20
>>   provided in [I-D.ietf-tsvwg-emergency-rsvp].  The coding for
>>   parameter is as follows:
>>
>>                       ALRP  ::=3D < AVP Header: TBD >
>>                                 { ALRP-Namespace }
>>                                 { ALRP-Priority }
>>
>>3.6.1.  ALRP-Namespace AVP
>>
>>   The ALRP-Namespace AVP (AVP Code TBD) is of type Unsigned32.
>>
>>3.6.2.  ALRP-Priority AVP
>>
>>   The ALRP-Priority AVP (AVP Code TBD) is of type Unsigned32.
>>
>>OLD:
>>
>>   [RFC4412] defines a resource priority header and established the
>>   initial registry.  That registry was later extended by
>>   [I-D.ietf-tsvwg-emergency-rsvp].
>>
>>NEW:=20
>>
>>   [RFC4412] defines a resource priority header and established the
>>   corresponding registry.  That registry was later converted=20
>>   to allow priorities to be expressed via numerical values by
>>   [I-D.ietf-tsvwg-emergency-rsvp].
>>
>>----------
>>
>>ADD to the IANA consideration section:=20
>>
>>
>>----------
>>
>>ALRP Namespace
>>
>>   IANA already maintains the
>>   Resource-Priority Namespaces registry (under the SIP Parameters)
>>   listing all such namespace.  However, that registry does not
>>   currently allocate a numerical value to each namespace. =20
>Hence, this
>>   document requests the IANA to extend the Resource-Priority=20
>Namespace
>>   registry in the following ways:
>>
>>   o  a new column should be added to the registry
>>
>>   o  the title of the new column should be "Namespace Numerical Value
>>      *"
>>
>>   o  in the Legend, add a line saying "Namespace Numerical=20
>Value =3D the
>>      unique numerical value identifying the namespace"
>>
>>   o  add a line at the bottom of the registry stating the=20
>following "*
>>      : [RFCXXX] " where XXX is the RFC number of the present document
>>
>>   o  allocate an actual numerical value to each namespace in the
>>      registry and state that value in the new "Namespace numerical
>>      Value *" column.
>>
>>   A numerical value should be allocated immediately by IANA to all
>>   existing namespace.  Then, in the future, IANA should automatically
>>   allocate a numerical value to any new namespace added to the
>>   registry.
>>
>>ALRP Priority
>>
>>   IANA already maintains the Resource-Priority
>>   Priority-values registry (under the SIP Parameters)=20
>listing all such
>>   priorities.  However, that registry does not currently allocate a
>>   numerical value to each priority-value.  Hence, this document
>>   requests the IANA to extend the Resource-Priority Priority-Values
>>   registry in the following ways:
>>
>>   o  for each namespace, the registry should be structured with two
>>      columns
>>
>>   o  the title of the first column should read "Priority=20
>Values (least
>>      to greatest)"
>>
>>   o  the first column should list all the values currently defined in
>>      the registry (e.g. for the drsn namespace: "routine",=20
>"priority",
>>      "immediate", "flash", "flash-override",=20
>"flash-override-override"
>>      for the drsn namespace)
>>
>>   o  the title of the second column should read "Priority Numerical
>>      Value *"
>>
>>   o  At the bottom of the registry, add a "Legend" with a line saying
>>      "Priority Numerical Value =3D the unique numerical value=20
>>identifying
>>      the priority within a namespace"
>>
>>   o  add a line at the bottom of the registry stating the=20
>following "*
>>      : [RFCXXX] " where XXX is the RFC number of the present document
>>
>>   o  allocate an actual numerical value to each and state that value=20
>>in
>>      the new "Priority Numerical Value *" column.
>>
>>   A numerical value should be allocated immediately by IANA to all
>>   existing priority.  Then, in the future, IANA should automatically
>>   allocate a numerical value to any new namespace added to the
>>   registry.  The numerical value must be unique within each=20
>namespace.
>>   For the initial allocation, within each namespace, values should be
>>   allocated in decreasing order ending with 0 (so that the greatest
>>   priority is always allocated value 0).  For example, in the drsn
>>   namespace, "routine" would be allocated numerical value 5 and
>>"flash-
>>   override-override" would be allocated numerical value 0.
>>
>>-----
>>
>>
>>Ciao
>>Hannes
>>
>>
>>=20
>>
>>>-----Original Message-----
>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>>Behalf Of
>>>Hannes Tschofenig
>>>Sent: 28 February, 2009 11:25
>>>To: dime@ietf.org
>>>Subject: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>>>
>>>Hi all,
>>>
>>>we have a normative reference in the Diameter QoS parameter draft=20
>>>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-paramet
>>>ers-09.txt
>>>pointing to
>>>http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>>>
>>>Yesterday, Magnus posted a mail to the TSVWG list that=20
>>>draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems=20
>>>getting through the IESG and the document bounced back to=20
>the working=20
>>>group. The mail can be found here:
>>>http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>>>
>>>Now, there is the risk of considerable delay in publication of our=20
>>>Diameter QoS parameter document as it will be blocked (for
>>potentially
>>>a long time).
>>>Since the Diameter QoS attribute and the Diameter QoS application=20
>>>document normatively depend on the QoS parameter document
>>they will be
>>>blocked as well.
>>>
>>>So, I have been thinking of what we could do to deal with this issue=20
>>>and here is a proposal to the group.
>>>
>>>***************
>>>My proposal is to move the priority parameters (Priority AVP,=20
>>>Admission-Priority AVP, and ALRP AVP) into a separate=20
>document and to=20
>>>progress them independently to get the main part of the Diameter QoS=20
>>>parameters document finalized.
>>>***************
>>>
>>>Please let me know if you find this idea acceptable. Please
>>respond as
>>>quickly as possible!
>>>
>>>Ciao
>>>Hannes
>>>
>>>PS: We would have to find an editor and authors for that the new=20
>>>document that contains the priority parameters but we can=20
>worry about=20
>>>that part larter.
>>>
>>>_______________________________________________
>>>DiME mailing list
>>>DiME@ietf.org
>>>https://www.ietf.org/mailman/listinfo/dime
>>>
>>
>>_______________________________________________
>>DiME mailing list
>>DiME@ietf.org
>>https://www.ietf.org/mailman/listinfo/dime
>>
>>_______________________________________________
>>DiME mailing list
>>DiME@ietf.org
>>https://www.ietf.org/mailman/listinfo/dime
>>
>
>

From vfajardo@tari.toshiba.com  Tue Mar  3 05:39:54 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ABB3F3A69E7 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 05:39:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.556
X-Spam-Level: 
X-Spam-Status: No, score=-1.556 tagged_above=-999 required=5 tests=[AWL=0.051,  BAYES_00=-2.599, DATE_IN_PAST_12_24=0.992]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Vw6-ZKt2oDf for <dime@core3.amsl.com>; Tue,  3 Mar 2009 05:39:54 -0800 (PST)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id B3C213A696E for <dime@ietf.org>; Tue,  3 Mar 2009 05:39:53 -0800 (PST)
Received: from [127.0.0.1] (toshi17.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n23DZRvZ055460; Tue, 3 Mar 2009 08:35:27 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49AC6217.4080401@tari.toshiba.com>
Date: Mon, 02 Mar 2009 17:47:51 -0500
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: jouni korhonen <jouni.nospam@gmail.com>
References: <07c701c99986$73684350$2ab5b70a@nsnintra.net> <72D5BF85-3093-4781-99CD-9ABC5FAE12E2@gmail.com>
In-Reply-To: <72D5BF85-3093-4781-99CD-9ABC5FAE12E2@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 13:39:54 -0000

I agree.

> Hi all,
>
> I would support removing as well. Be done with it and move on with the 
> QoS parameter document. Those features that were in the tsvwg document 
> can be documented later in a separate document, when and if needed.
>
> Cheers,
>     Jouni
>
>
> On Feb 28, 2009, at 11:25 AM, Hannes Tschofenig wrote:
>
>> Hi all,
>>
>> we have a normative reference in the Diameter QoS parameter draft
>> http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-09.txt 
>>
>> pointing to 
>> http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>>
>> Yesterday, Magnus posted a mail to the TSVWG list that
>> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems 
>> getting
>> through the IESG and the document bounced back to the working group. The
>> mail can be found here:
>> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>>
>> Now, there is the risk of considerable delay in publication of our 
>> Diameter
>> QoS parameter document as it will be blocked (for potentially a long 
>> time).
>> Since the Diameter QoS attribute and the Diameter QoS application 
>> document
>> normatively depend on the QoS parameter document they will be blocked as
>> well.
>>
>> So, I have been thinking of what we could do to deal with this issue and
>> here is a proposal to the group.
>>
>> ***************
>> My proposal is to move the priority parameters (Priority AVP,
>> Admission-Priority AVP, and ALRP AVP) into a separate document and to
>> progress them independently to get the main part of the Diameter QoS
>> parameters document finalized.
>> ***************
>>
>> Please let me know if you find this idea acceptable. Please respond as
>> quickly as possible!
>>
>> Ciao
>> Hannes
>>
>> PS: We would have to find an editor and authors for that the new 
>> document
>> that contains the priority parameters but we can worry about that part
>> larter.
>>
>> _______________________________________________
>> DiME mailing list
>> DiME@ietf.org
>> https://www.ietf.org/mailman/listinfo/dime
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>
>


From dromasca@avaya.com  Tue Mar  3 06:24:13 2009
Return-Path: <dromasca@avaya.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A8E7E3A696E for <dime@core3.amsl.com>; Tue,  3 Mar 2009 06:24:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.506
X-Spam-Level: 
X-Spam-Status: No, score=-2.506 tagged_above=-999 required=5 tests=[AWL=0.093,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5KzTiq9shM0L for <dime@core3.amsl.com>; Tue,  3 Mar 2009 06:24:12 -0800 (PST)
Received: from co300216-co-outbound.net.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by core3.amsl.com (Postfix) with ESMTP id B5DB03A6948 for <dime@ietf.org>; Tue,  3 Mar 2009 06:24:12 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,296,1233550800"; d="scan'208";a="163359968"
Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by co300216-co-outbound.net.avaya.com with ESMTP; 03 Mar 2009 09:24:39 -0500
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-erhwest-out.avaya.com with ESMTP; 03 Mar 2009 09:24:38 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 3 Mar 2009 15:24:17 +0100
Message-ID: <EDC652A26FB23C4EB6384A4584434A0401454528@307622ANEX5.global.avaya.com>
In-Reply-To: <3D3C75174CB95F42AD6BCC56E5555B45011B07FC@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
Thread-Index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDAAKe36wAAXy3QwAAEhKAAADGmLMA==
References: <3D3C75174CB95F42AD6BCC56E5555B45011B062A@FIESEXC015.nsn-intra.net> <006b01c99bd9$27290ce0$7b27460a@china.huawei.com> <3D3C75174CB95F42AD6BCC56E5555B45011B07FC@FIESEXC015.nsn-intra.net>
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>, "ext Fortune HUANG" <fqhuang@huawei.com>, "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>, <dime@ietf.org>, <magnus.westerlund@ericsson.com>
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 14:24:13 -0000

=20

> -----Original Message-----
> From: Tschofenig, Hannes (NSN - FI/Espoo)=20
> [mailto:hannes.tschofenig@nsn.com]=20
> Sent: Tuesday, March 03, 2009 10:29 AM
> To: ext Fortune HUANG; Hannes Tschofenig; dime@ietf.org;=20
> magnus.westerlund@ericsson.com; Romascanu, Dan (Dan)
> Subject: RE: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>=20
> Hi Fortune,=20
>=20
> >Hi Hannes,
> >
> >But I still think at least we should provide a brief statement about=20
> >what the AVP indicates.
>=20
> There is a brief statement about the AVPs in the beginning of=20
> the document.=20
>=20
> >And I also would like to have
> >the detailed location of the relevant reference in this=20
> draft because=20
> >it would be painful to go over another RFC just for the=20
> meaning of one=20
> >AVP.
>=20
> Well. This is somewhat difficult. Think about DiffServ Code Points.=20
> Which part of what document would provide you the information=20
> you would like to know?
>=20

Actually I agree with Fortune on this. If I understand him well he is
asking for a more exact pointer to the section in the referred documents
(e.g. Section 7.3 in [RFC xxxx] instead of [RFC xxxx]). This is good
practice and is possible in the majority of the cases. Even in the case
of DSCP we can point to the section where the term is defined of first
introduced.=20

Dan
(speaking as a contributor)

From glenzorn@comcast.net  Tue Mar  3 13:18:21 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B6B823A6A16 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 13:18:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.74
X-Spam-Level: 
X-Spam-Status: No, score=-0.74 tagged_above=-999 required=5 tests=[BAYES_20=-0.74]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQr1YNyk9mE6 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 13:18:21 -0800 (PST)
Received: from QMTA01.emeryville.ca.mail.comcast.net (qmta01.emeryville.ca.mail.comcast.net [76.96.30.16]) by core3.amsl.com (Postfix) with ESMTP id E358E3A69F4 for <dime@ietf.org>; Tue,  3 Mar 2009 13:18:20 -0800 (PST)
Received: from OMTA02.emeryville.ca.mail.comcast.net ([76.96.30.19]) by QMTA01.emeryville.ca.mail.comcast.net with comcast id NhsL1b02f0QkzPwA1lJpSk; Tue, 03 Mar 2009 21:18:49 +0000
Received: from gwzPC ([24.18.239.198]) by OMTA02.emeryville.ca.mail.comcast.net with comcast id NlJn1b00b4HXf1k8NlJozc; Tue, 03 Mar 2009 21:18:48 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: <dime@ietf.org>
Date: Wed, 4 Mar 2009 04:18:45 +0700
Message-ID: <03b601c99c45$a31c57f0$e95507d0$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
content-language: en-us
Thread-Index: AcmcRaJAsYcFpnulTcy1vEP28RtfjQ==
Subject: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 21:18:21 -0000

I'm pretty sure that I've mentioned this before, but the problematic
definitions remain.  The Origin-Realm & Destination-Realm AVPs are specified
to be of type DiameterIdentity.  This is plainly wrong, since
DiameterIdentity is defined as an FQDN which is NOT the same as a Diameter
realm.  I think that it is _very_ important to fix this error in RFC 3588,
rather than perpetuating it.

~gwz

Play assigns meaning to human activity--work erases it.
  -- P.L. Wilson




From jouni.nospam@gmail.com  Tue Mar  3 14:44:02 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 67FDE3A68F0 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 14:44:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2eWcSm6XQM8L for <dime@core3.amsl.com>; Tue,  3 Mar 2009 14:44:01 -0800 (PST)
Received: from mail-ew0-f177.google.com (mail-ew0-f177.google.com [209.85.219.177]) by core3.amsl.com (Postfix) with ESMTP id 2AAD33A67FA for <dime@ietf.org>; Tue,  3 Mar 2009 14:44:01 -0800 (PST)
Received: by ewy25 with SMTP id 25so2539020ewy.37 for <dime@ietf.org>; Tue, 03 Mar 2009 14:44:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=AtiDCVC8ILkxHuKLjVxFrwRKJL1r5ESl+WLmAV9UmOo=; b=BScQxyNDpqe2F+r5epBjQ0NMWIr+fYhz7RSg87whaB/n7/IUhkyFsf7yRoAR4lcoAm r1kGc9aBenHoFlczHa2kJw9io2iN6oquq88MieN+TIa/56qOOiukFyWbuQcUdVuR/2j4 X+EyPEScHFIEFmDW8V+dS0fAmI1IFcADherUU=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=fvp8BRMNz9Xc2khlDZ1/4ZB12wemcLMz3MZZx03ReuD3ypMj8ftwMVSnjfIj0gwvww vLv3JuhuQybprgX7F9y4Ro03xmW1mf6TUMhGICRwbXcMJn9nc0XFOOjgh6LOPri7kA/X EaXEK6b0fYm1/Gf3Zn0TvNXsRyoskCrJ9DV0I=
Received: by 10.210.34.19 with SMTP id h19mr4753982ebh.89.1236120267979; Tue, 03 Mar 2009 14:44:27 -0800 (PST)
Received: from a83-245-210-82.elisa-laajakaista.fi (a83-245-210-82.elisa-laajakaista.fi [83.245.210.82]) by mx.google.com with ESMTPS id 28sm445838eye.59.2009.03.03.14.44.26 (version=TLSv1/SSLv3 cipher=RC4-MD5); Tue, 03 Mar 2009 14:44:27 -0800 (PST)
Message-Id: <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Avi Lior <avi@bridgewatersystems.com>
In-Reply-To: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Wed, 4 Mar 2009 00:44:25 +0200
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com>
X-Mailer: Apple Mail (2.930.3)
Cc: "dime@ietf.org" <dime@ietf.org>, Mark Jones <Mark.Jones@bridgewatersystems.com>, "Lionel.morand@orange-ftgroup.com" <Lionel.morand@orange-ftgroup.com>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2009 22:44:02 -0000

Hi Avi,

Thanks for reading & commenting the I-D.

On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:

> A couple of comments:
>
> 1)  The draft should mention something about the presence of  
> Destination-Host AVP.
>
> The rule for routing is that the Destination-Host AVP is not looked  
> at until the message reaches the terminal realm as determined by the  
> decorated NAI.

Where you would suggest to include the clarifying text? In Section 4.2.?


> 2) I dont like the way Destination-Realm is being used.
>
> The draft states that the destination realm is updated on a hop by  
> hop basis together with the decorated NAI.

I assume that is the only way to ensure the request message really  
goes through all wanted realms.


> If an intermediary is not compliant with the scheme presented by  
> this draft it will result in the intermediary consuming the message  
> locally - since the message contains the destination realm equal to  
> its realm.   Thus the message is not going to reach the destination.

That is the reason why the I-D suggests only using the decoration  
stuff with a new application that is known to support this I-D. In  
that way legacy agents can be bypassed.

>
> Instead, I propose that the destination realm should be always set  
> to the terminal realm, thus:
>
> Agents that are compliant with the draft will first look at the NAI  
> to determine whether the packet has reached the terminal realm or  
> where it should be routed next;

Are you proposing to make the routing decision based on the User-Name  
(and ignore the Destination-Realm all together) in cases where 1) the  
agent supports this I-D and 2) the User-Name contains a decorated NAI?  
Once the decorated NAI would have been "consumed" the checking would  
be based on the Destination-Realm again..?

> Agents that are not compatible with the draft will use the old rules  
> for routing and would route the message according to the destination- 
> realm only and thus the message will reach the final destintaion  
> albeit not necessarily according to the decorated NAI. But at least  
> it would work.
>
>
> Did I miss anything?

What happens if.. the route happens to have some non-compliant agents  
and when the request reaches its final end (e.g. according to the  
inter-connection architecture) the User-Name still has decorated NAI?  
Would the decorated NAI compliant server/proxy send to request back to  
some other realm pointed by the User-name? This would effectively  
cause a routing loop, right?

Cheers,
	Jouni



>
>


From fqhuang@huawei.com  Tue Mar  3 19:05:59 2009
Return-Path: <fqhuang@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0C76928C29C for <dime@core3.amsl.com>; Tue,  3 Mar 2009 19:05:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.863
X-Spam-Level: 
X-Spam-Status: No, score=0.863 tagged_above=-999 required=5 tests=[AWL=1.358,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0gnIipAMFcax for <dime@core3.amsl.com>; Tue,  3 Mar 2009 19:05:58 -0800 (PST)
Received: from szxga04-in.huawei.com (unknown [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 8B55428C297 for <dime@ietf.org>; Tue,  3 Mar 2009 19:05:53 -0800 (PST)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFY0093SOM61B@szxga04-in.huawei.com> for dime@ietf.org; Wed, 04 Mar 2009 11:06:06 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KFY00K0COM6B8@szxga04-in.huawei.com> for dime@ietf.org; Wed, 04 Mar 2009 11:06:06 +0800 (CST)
Received: from h36145c ([10.70.39.123]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KFY00909OM68T@szxml05-in.huawei.com> for dime@ietf.org; Wed, 04 Mar 2009 11:06:06 +0800 (CST)
Date: Wed, 04 Mar 2009 11:06:06 +0800
From: Fortune HUANG <fqhuang@huawei.com>
In-reply-to: <03b601c99c45$a31c57f0$e95507d0$@net>
To: 'Glen Zorn' <glenzorn@comcast.net>, dime@ietf.org
Message-id: <002a01c99c76$29002880$7b27460a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Thread-index: AcmcRaJAsYcFpnulTcy1vEP28RtfjQAI9Zkg
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 03:05:59 -0000

Hi Glen,

I would like to support your proposal.
Maybe we can simply define the realm AVPs to be of type OctetString with the
detailed description of the format, or we can derive a new Derived AVP Data
Format for the realm AVPs.
The latter would be my preference since realm is a very important concept
and realm AVPs are used everywhere in Diameter.

Best Regards,
Fortune


-----Original Message-----
From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of Glen
Zorn
Sent: Wednesday, March 04, 2009 5:19 AM
To: dime@ietf.org
Subject: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis

I'm pretty sure that I've mentioned this before, but the problematic
definitions remain.  The Origin-Realm & Destination-Realm AVPs are specified
to be of type DiameterIdentity.  This is plainly wrong, since
DiameterIdentity is defined as an FQDN which is NOT the same as a Diameter
realm.  I think that it is _very_ important to fix this error in RFC 3588,
rather than perpetuating it.

~gwz

Play assigns meaning to human activity--work erases it.
  -- P.L. Wilson



_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime


From julien.bournelle@gmail.com  Tue Mar  3 23:04:37 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 095E828C2C2 for <dime@core3.amsl.com>; Tue,  3 Mar 2009 23:04:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FtNKXuz2rc5o for <dime@core3.amsl.com>; Tue,  3 Mar 2009 23:04:36 -0800 (PST)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.30]) by core3.amsl.com (Postfix) with ESMTP id 1D00F28C2CF for <dime@ietf.org>; Tue,  3 Mar 2009 23:04:36 -0800 (PST)
Received: by yw-out-2324.google.com with SMTP id 5so2749469ywh.49 for <dime@ietf.org>; Tue, 03 Mar 2009 23:05:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding; bh=Usr5ptenpPorrcaPccBXm0tQIbpEv0ndTmXS6MWSkqE=; b=c6crILZiiTt0cz7Z0csYIVwWfu50/epuMepQv8aM/4wR/8RYpNNzJzrtM/njydZaww IDU9tZqWcnCHrqlip5x8CGKcMgcNkjXV/ARyPpa6zu70/6i+pedtmODo9XggabtIBZos XJd0pRoehmSx9mEGkeyLsqN9xeObVE0zcTeEY=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; b=L14hnZvEwGxJDJR4yrmDmJeUiNFA6o7jctVwzLPQ/WpL8UbXhM74BvpR0cJRlF/JWF u9L8mUV/j/5mE/DWzlWudxZNPZkFn09fM6flbQwz44x5tWi/MGgD5qq7LwSBO1YFNF95 aZalR6d4qZSHAYBUMFP9iS463HtTpNqnfLpcI=
MIME-Version: 1.0
Received: by 10.220.76.213 with SMTP id d21mr2663704vck.82.1236150303695; Tue,  03 Mar 2009 23:05:03 -0800 (PST)
Date: Wed, 4 Mar 2009 08:05:03 +0100
Message-ID: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: "dime@ietf.org" <dime@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 07:04:37 -0000

Hi all,

 we try to solve the issue concerning the need for a new App-Id or not.

 The ERP protocol (RFC 5296) is to be used along with EAP. It basically
defines two new EAP codes and uses keying material derived from a first
EAP authentication.

 To start the discussion, let's take the non-roaming case.

 In non-roaming, we have first an EAP authentication using Diameter EAP.
 Then, for reauthentication using ERP, we have two messages (Request/Response)
 between NAS and the AAA/ERP server carrying EAP packets

 See (http://tools.ietf.org/html/rfc5296#page-6)

 So, either we reuse the Diameter EAP Application (DER/DEA) or we define
a new Diameter Application.

 If we use a new Diameter Application, a new Diameter session will be created
and eventually a new Diameter server will be reached. What bothers
me in this case is that we basically perform a reauthentication for the same
session which is primarly handled at the AAA/EAP server. So, i'm wondering
what happens concerning Authorization Lifetime session etc..

 Note that I still don't have strong opinion and I'll be glad to hear opinions
from others.

 Regards,

 Julien

From Hannes.Tschofenig@gmx.net  Wed Mar  4 00:13:10 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7BEE23A67F1 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 00:13:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.176
X-Spam-Level: 
X-Spam-Status: No, score=-2.176 tagged_above=-999 required=5 tests=[AWL=0.423,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 61LP04FiDhvr for <dime@core3.amsl.com>; Wed,  4 Mar 2009 00:13:09 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 9D2CE3A69C3 for <dime@ietf.org>; Wed,  4 Mar 2009 00:12:55 -0800 (PST)
Received: (qmail invoked by alias); 04 Mar 2009 08:13:22 -0000
Received: from unknown (EHLO 4FIL42860) [192.100.124.156] by mail.gmx.net (mp071) with SMTP; 04 Mar 2009 09:13:22 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18EZU4J6c8EGZGww9hFpWL1YCXDnydWrnVPkpDWyB lkikDzVatSfdNP
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>, <dime@ietf.org>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>
Date: Wed, 4 Mar 2009 10:14:25 +0200
Message-ID: <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-reply-to: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-Index: Acmcl4yfFb8ciL5dQ46U35p77sP32gACRBKw
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.53
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 08:13:10 -0000

Hi Julien, 

When we discussed this at the phone conference call (and the discussion is
also captured in the meeting minutes) then I thought that the conclusion was
to define a new Diameter application for this exchange:


   Peer               Authenticator                      Server
   ====               =============                      ======

    [<-- EAP-Initiate/ -----
        Re-auth-Start]
    [<-- EAP-Request/ ------
        Identity]


    ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
          Re-auth/                  Re-auth/
         [Bootstrap]              [Bootstrap])

    <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
          Re-auth/                   Re-auth/
        [Bootstrap]                [Bootstrap])

   Note: [] brackets indicate optionality.

                          Figure 2: ERP Exchange

(The server in the figure above is the HOKEY server, a dedicated entity.)


The initial EAP authentication is left untouched and, as Glen explained us,
there is the assumption that the AAA entities work together with the HOKEY
servers in a non-standardized way. To me that sounded like a good plan. 

Does this make any sense? 


The non-HOKEY expert
Hannes

PS: I never said that this is specific document is going to be trivial :-) 

>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On 
>Behalf Of Julien Bournelle
>Sent: 04 March, 2009 09:05
>To: dime@ietf.org
>Subject: [Dime] DiME ERP: new Application ID or not ? 
>(non-roaming case)
>
>Hi all,
>
> we try to solve the issue concerning the need for a new App-Id or not.
>
> The ERP protocol (RFC 5296) is to be used along with EAP. It 
>basically defines two new EAP codes and uses keying material 
>derived from a first EAP authentication.
>
> To start the discussion, let's take the non-roaming case.
>
> In non-roaming, we have first an EAP authentication using 
>Diameter EAP.
> Then, for reauthentication using ERP, we have two messages 
>(Request/Response)  between NAS and the AAA/ERP server 
>carrying EAP packets
>
> See (http://tools.ietf.org/html/rfc5296#page-6)
>
> So, either we reuse the Diameter EAP Application (DER/DEA) or 
>we define a new Diameter Application.
>
> If we use a new Diameter Application, a new Diameter session 
>will be created and eventually a new Diameter server will be 
>reached. What bothers me in this case is that we basically 
>perform a reauthentication for the same session which is 
>primarly handled at the AAA/EAP server. So, i'm wondering what 
>happens concerning Authorization Lifetime session etc..
>
> Note that I still don't have strong opinion and I'll be glad 
>to hear opinions from others.
>
> Regards,
>
> Julien
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>


From lionel.morand@orange-ftgroup.com  Wed Mar  4 01:56:45 2009
Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1CD663A6B44 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 01:56:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.249
X-Spam-Level: 
X-Spam-Status: No, score=-3.249 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dcic-hUSy+wX for <dime@core3.amsl.com>; Wed,  4 Mar 2009 01:56:44 -0800 (PST)
Received: from p-mail2.rd.francetelecom.com (p-mail2.rd.francetelecom.com [195.101.245.16]) by core3.amsl.com (Postfix) with ESMTP id CC1303A6B84 for <dime@ietf.org>; Wed,  4 Mar 2009 01:56:43 -0800 (PST)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.193.117.153]) by ftrdsmtp1.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959);  Wed, 4 Mar 2009 10:57:07 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 4 Mar 2009 10:57:06 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB02606456C6A@ftrdmel2>
In-Reply-To: <03b601c99c45$a31c57f0$e95507d0$@net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
Thread-Index: AcmcRaJAsYcFpnulTcy1vEP28RtfjQAZy2dg
References: <03b601c99c45$a31c57f0$e95507d0$@net>
From: <lionel.morand@orange-ftgroup.com>
To: <glenzorn@comcast.net>, <dime@ietf.org>
X-OriginalArrivalTime: 04 Mar 2009 09:57:07.0757 (UTC) FILETIME=[94459DD0:01C99CAF]
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 09:56:45 -0000

Hi,

Could it be "simply" solved by modifying the definition of the =
DiameterIdentity format to reflect that it can be either an FQDN or a =
realm?

Something like:

   DiameterIdentity
      The DiameterIdentity format is derived from the OctetString AVP
      Base Format.

         DiameterIdentity  =3D FQDN/realm

      DiameterIdentity value is used to identify:
      - either a Diameter node for purposes of duplicate connection and
        routing loop detection.
      - either a realm to determine whether messages can be satisfied=20
        locally, or whether they must be routed or redirected.=20

      When the DiameterIdentity is used to identify a Diameter node,
      the contents of the string MUST be the FQDN of the Diameter node.
      If multiple Diameter nodes run on the same host, each Diameter
      node MUST be assigned a unique DiameterIdentity.  If a Diameter
      node can be identified by several FQDNs, a single FQDN should be
      picked at startup, and used as the only DiameterIdentity for that
      node, whatever the connection it is sent on.

Lionel

> -----Message d'origine-----
> De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De=20
> la part de Glen Zorn
> Envoy=E9 : mardi 3 mars 2009 22:19
> =C0 : dime@ietf.org
> Objet : [Dime] Problem with Origin- & Destination-Realm AVPs=20
> in RFC3588bis
>=20
> I'm pretty sure that I've mentioned this before, but the=20
> problematic definitions remain.  The Origin-Realm &=20
> Destination-Realm AVPs are specified to be of type=20
> DiameterIdentity.  This is plainly wrong, since=20
> DiameterIdentity is defined as an FQDN which is NOT the same=20
> as a Diameter realm.  I think that it is _very_ important to=20
> fix this error in RFC 3588, rather than perpetuating it.
>=20
> ~gwz
>=20
> Play assigns meaning to human activity--work erases it.
>   -- P.L. Wilson
>=20
>=20
>=20
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>=20

From julien.bournelle@gmail.com  Wed Mar  4 02:03:11 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 34C893A684A for <dime@core3.amsl.com>; Wed,  4 Mar 2009 02:03:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xh9DqJsLVy4A for <dime@core3.amsl.com>; Wed,  4 Mar 2009 02:03:10 -0800 (PST)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.31]) by core3.amsl.com (Postfix) with ESMTP id 3B71F3A6876 for <dime@ietf.org>; Wed,  4 Mar 2009 02:02:58 -0800 (PST)
Received: by yw-out-2324.google.com with SMTP id 5so2766492ywh.49 for <dime@ietf.org>; Wed, 04 Mar 2009 02:03:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=QT8xha5lScjTRkUtlCdwECGFIMu/g351LgDDWpdoq7g=; b=RVTdT5K9/PVHDl5zdmDeOJG8e4EvFs4sHqlMLzNKGhtpGpOohSjt6bwPk/LPrGaUV/ e+An/SALEAfClsYHjh1Q1jwjRlHnYPLyh2xPRMN+z34gjCo2nlXUVfMZzhsipS5RuEHv GcZ5J4ML1cogQhoT+/slU0JxRAiyayQj9JZHA=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=LVS1liANAml9WX24bydMQGw73K4nPzg2ZOK+ZLrZKITgIpLe9QQbhESWT86Qz0DGVO pqSzfshIPW2rlFVwEpfu445U2cd/wigWZlZsBcBy5dyK9hRKeqmM18eMHt3y4qmRzd+T kX160LOcIZTPxyF7EfQgMnrJLDaPk5mqiouUk=
MIME-Version: 1.0
Received: by 10.220.71.130 with SMTP id h2mr2687253vcj.118.1236161005871; Wed,  04 Mar 2009 02:03:25 -0800 (PST)
In-Reply-To: <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>
Date: Wed, 4 Mar 2009 11:03:25 +0100
Message-ID: <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: dime@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 10:03:11 -0000

hi hannes,

 see inline,

On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
<Hannes.Tschofenig@gmx.net> wrote:
> Hi Julien,
>
> When we discussed this at the phone conference call (and the discussion i=
s
> also captured in the meeting minutes) then I thought that the conclusion =
was
> to define a new Diameter application for this exchange:
>
>
> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0Server
> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=3D=3D=3D=3D=3D=3D
>
> =A0 =A0[<-- EAP-Initiate/ -----
> =A0 =A0 =A0 =A0Re-auth-Start]
> =A0 =A0[<-- EAP-Request/ ------
> =A0 =A0 =A0 =A0Identity]
>
>
> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Re-auth/
> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>
> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Re-auth/
> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>
> =A0 Note: [] brackets indicate optionality.
>
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP Exchange
>
> (The server in the figure above is the HOKEY server, a dedicated entity.)
>
>
> The initial EAP authentication is left untouched and, as Glen explained u=
s,
> there is the assumption that the AAA entities work together with the HOKE=
Y
> servers in a non-standardized way. To me that sounded like a good plan.
>
> Does this make any sense?

 Taking into accounts that we have one app-id for Diameter EAP (I
would say NASREQ-EAP)
AND soon another app-id for Diameter MIP6 (which also use EAP for
authentication). It certainly
make sense to not reuse the same App-ID for ERP if we want to use ERP
for the mip6 case.

 Let's see if others have opinion.

 Regards,

 Julien

>
>
> The non-HOKEY expert
> Hannes
>
> PS: I never said that this is specific document is going to be trivial :-=
)
>
>>-----Original Message-----
>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>>Behalf Of Julien Bournelle
>>Sent: 04 March, 2009 09:05
>>To: dime@ietf.org
>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>(non-roaming case)
>>
>>Hi all,
>>
>> we try to solve the issue concerning the need for a new App-Id or not.
>>
>> The ERP protocol (RFC 5296) is to be used along with EAP. It
>>basically defines two new EAP codes and uses keying material
>>derived from a first EAP authentication.
>>
>> To start the discussion, let's take the non-roaming case.
>>
>> In non-roaming, we have first an EAP authentication using
>>Diameter EAP.
>> Then, for reauthentication using ERP, we have two messages
>>(Request/Response) =A0between NAS and the AAA/ERP server
>>carrying EAP packets
>>
>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>
>> So, either we reuse the Diameter EAP Application (DER/DEA) or
>>we define a new Diameter Application.
>>
>> If we use a new Diameter Application, a new Diameter session
>>will be created and eventually a new Diameter server will be
>>reached. What bothers me in this case is that we basically
>>perform a reauthentication for the same session which is
>>primarly handled at the AAA/EAP server. So, i'm wondering what
>>happens concerning Authorization Lifetime session etc..
>>
>> Note that I still don't have strong opinion and I'll be glad
>>to hear opinions from others.
>>
>> Regards,
>>
>> Julien
>>_______________________________________________
>>DiME mailing list
>>DiME@ietf.org
>>https://www.ietf.org/mailman/listinfo/dime
>>
>
>

From dromasca@avaya.com  Wed Mar  4 04:35:32 2009
Return-Path: <dromasca@avaya.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC9CB28C2DA; Wed,  4 Mar 2009 04:35:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.518
X-Spam-Level: 
X-Spam-Status: No, score=-2.518 tagged_above=-999 required=5 tests=[AWL=0.081,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qccIueBb9w3o; Wed,  4 Mar 2009 04:35:32 -0800 (PST)
Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) by core3.amsl.com (Postfix) with ESMTP id 5FEFB28C173; Wed,  4 Mar 2009 04:35:31 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,300,1233550800"; d="scan'208";a="139205321"
Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by de307622-de-outbound.net.avaya.com with ESMTP; 04 Mar 2009 07:35:57 -0500
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.15]) by co300216-co-erhwest-out.avaya.com with ESMTP; 04 Mar 2009 07:35:56 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 4 Mar 2009 13:35:54 +0100
Message-ID: <EDC652A26FB23C4EB6384A4584434A0401493EE3@307622ANEX5.global.avaya.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Evaluation: draft-jones-dime-3gpp-eps-command-codes-01.txt to Informational RFC 
Thread-Index: AcmcuMC/ytBhHSQFTZyIKkla5jO//QADN4vA
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: <aaa-doctors@ietf.org>, <ops-dir@ietf.org>, <dime@ietf.org>
Subject: [Dime] FW: Evaluation: draft-jones-dime-3gpp-eps-command-codes-01.txt to Informational RFC
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 12:35:33 -0000

=20

A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-jones-dime-3gpp-eps-command-co
des-01.txt

Technical Summary

   This document registers a set of IANA Diameter Command Codes to be
   used in new vendor-specific Diameter applications defined for the
   Third Generation Partnership Project (3GPP) Evolved Packet System
   (EPS).  These new Diameter applications are defined for MME and SGSN
   related interfaces in the Release 8 architecture.

Working Group Summary

 This document is not a DIME working group document but has received
review from DIME WG members

Document Quality

The document has been reviewed by Hannes Tschofenig, Victor Fajardo and
Glen Zorn from the DIME working group. The main work this document is
based on has been developed in the 3GPP and has received a fair amount
of review.

Personnel

Hannes Tschofenig is the document shepherd. Dan Romascanu is the
responsible Area Director.=20

RFC Editor Note

  (Insert RFC Editor Note here or remove section)

IRTF Note

  (Insert IRTF Note here or remove section)

IESG Note

  (Insert IESG Note here or remove section)

IANA Note

  (Insert IANA Note here or remove section)







From lionel.morand@orange-ftgroup.com  Wed Mar  4 05:21:12 2009
Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 017AD28C254 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 05:21:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level: 
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e5GRzu6UUxAo for <dime@core3.amsl.com>; Wed,  4 Mar 2009 05:21:11 -0800 (PST)
Received: from R-MAIL2.rd.francetelecom.com (r-mail2.rd.francetelecom.com [217.108.152.42]) by core3.amsl.com (Postfix) with ESMTP id BAAE128C237 for <dime@ietf.org>; Wed,  4 Mar 2009 05:21:10 -0800 (PST)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.193.117.153]) by ftrdsmtp2.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959);  Wed, 4 Mar 2009 14:21:32 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 4 Mar 2009 14:21:29 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB02606456D4A@ftrdmel2>
In-Reply-To: <00ac01c99cc2$b5d76330$9001a8c0@xxxx87e842e29b>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Problem with Origin- & Destination-Realm AVPs in	RFC3588bis
Thread-Index: AcmcRaJAsYcFpnulTcy1vEP28RtfjQAZy2dgAATaNmAAAsgQsA==
References: <7DBAFEC6A76F3E42817DF1EBE64CB02606456C6A@ftrdmel2> <00ac01c99cc2$b5d76330$9001a8c0@xxxx87e842e29b>
From: <lionel.morand@orange-ftgroup.com>
To: <fqhuang@huawei.com>, <glenzorn@comcast.net>, <dime@ietf.org>
X-OriginalArrivalTime: 04 Mar 2009 13:21:32.0620 (UTC) FILETIME=[22B330C0:01C99CCC]
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 13:21:12 -0000

I'm not sure to understand but I might have missed something.
>From a syntax point of view, what is the difference between a FQDN and a =
realm?
What would be the "potential" impacts to say that the DiameterIdentity =
can be a FQDN or a realm?

Lionel

> -----Message d'origine-----
> De : Fortune HUANG [mailto:fqhuang@huawei.com]=20
> Envoy=E9 : mercredi 4 mars 2009 13:14
> =C0 : MORAND Lionel RD-CORE-ISS; glenzorn@comcast.net; dime@ietf.org
> Objet : RE: [Dime] Problem with Origin- & Destination-Realm=20
> AVPs in RFC3588bis
>=20
> Hi Lionel,
>=20
> Your proposal could probably work, but might challenge the=20
> Diameter parser if a strict check on the data format is needed.
> Also, it would be inconvenient for us to apply the=20
> DiameterIdentity type to a AVP, we would also need to specify=20
> the sub-type (FQDN or realm) in addition to the specification=20
> of type DiameterIdentity, or else it would be not clear=20
> enough for the definition of a AVP.
>=20
> Best Regards,
> Fortune
>=20
>=20
> -----Original Message-----
> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
> Behalf Of lionel.morand@orange-ftgroup.com
> Sent: Wednesday, March 04, 2009 5:57 PM
> To: glenzorn@comcast.net; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm=20
> AVPs in RFC3588bis
>=20
> Hi,
>=20
> Could it be "simply" solved by modifying the definition of=20
> the DiameterIdentity format to reflect that it can be either=20
> an FQDN or a realm?
>=20
> Something like:
>=20
>    DiameterIdentity
>       The DiameterIdentity format is derived from the OctetString AVP
>       Base Format.
>=20
>          DiameterIdentity  =3D FQDN/realm
>=20
>       DiameterIdentity value is used to identify:
>       - either a Diameter node for purposes of duplicate=20
> connection and
>         routing loop detection.
>       - either a realm to determine whether messages can be satisfied=20
>         locally, or whether they must be routed or redirected.=20
>=20
>       When the DiameterIdentity is used to identify a Diameter node,
>       the contents of the string MUST be the FQDN of the=20
> Diameter node.
>       If multiple Diameter nodes run on the same host, each Diameter
>       node MUST be assigned a unique DiameterIdentity.  If a Diameter
>       node can be identified by several FQDNs, a single FQDN should be
>       picked at startup, and used as the only=20
> DiameterIdentity for that
>       node, whatever the connection it is sent on.
>=20
> Lionel
>=20
> > -----Message d'origine-----
> > De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org]=20
> De la part=20
> > de Glen Zorn Envoy=E9 : mardi 3 mars 2009 22:19 =C0 :=20
> dime@ietf.org Objet=20
> > : [Dime] Problem with Origin- & Destination-Realm AVPs in RFC3588bis
> >=20
> > I'm pretty sure that I've mentioned this before, but the=20
> problematic=20
> > definitions remain.  The Origin-Realm & Destination-Realm AVPs are=20
> > specified to be of type DiameterIdentity.  This is plainly wrong,=20
> > since DiameterIdentity is defined as an FQDN which is NOT=20
> the same as=20
> > a Diameter realm.  I think that it is _very_ important to fix this=20
> > error in RFC 3588, rather than perpetuating it.
> >=20
> > ~gwz
> >=20
> > Play assigns meaning to human activity--work erases it.
> >   -- P.L. Wilson
> >=20
> >=20
> >=20
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> >=20
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>=20
>=20
>=20

From fbrockne@cisco.com  Wed Mar  4 08:17:40 2009
Return-Path: <fbrockne@cisco.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 405583A691A for <dime@core3.amsl.com>; Wed,  4 Mar 2009 08:17:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level: 
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3-nPDWdlWaSI for <dime@core3.amsl.com>; Wed,  4 Mar 2009 08:17:38 -0800 (PST)
Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 9268F28C34A for <dime@ietf.org>; Wed,  4 Mar 2009 08:17:37 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.38,301,1233532800"; d="scan'208,217";a="35374175"
Received: from ams-dkim-2.cisco.com ([144.254.224.139]) by ams-iport-1.cisco.com with ESMTP; 04 Mar 2009 16:18:04 +0000
Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n24GI4uQ006554;  Wed, 4 Mar 2009 17:18:04 +0100
Received: from xbh-ams-332.emea.cisco.com (xbh-ams-332.cisco.com [144.254.231.87]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n24GI4bm020666; Wed, 4 Mar 2009 16:18:04 GMT
Received: from xmb-ams-336.cisco.com ([144.254.231.81]) by xbh-ams-332.emea.cisco.com with Microsoft SMTPSVC(6.0.3790.1830);  Wed, 4 Mar 2009 17:18:04 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C99CE4.CBF07F8D"
Date: Wed, 4 Mar 2009 17:18:03 +0100
Message-ID: <693E0961C9EFD946AC7067D6774636250784861D@xmb-ams-336.emea.cisco.com>
In-Reply-To: <8A8CFE8F89C38B41A749C19328C76D6308AE2281F6@exchange02.bridgewatersys.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Dime rechartering: Include Carrier-Grade NAT ControlApplication?
Thread-Index: AckwX8T3ySFkqEURSt+aixgVjkUpmAAQLsRAGxDsECA=
References: <693E0961C9EFD946AC7067D67746362506986352@xmb-ams-336.emea.cisco.com> <9cf5ced20810170653j4dd39b3dy851e21eb5da8e27f@mail.gmail.com> <8A8CFE8F89C38B41A749C19328C76D6308AE2281F6@exchange02.bridgewatersys.com>
From: "Frank Brockners (fbrockne)" <fbrockne@cisco.com>
To: "Avi Lior" <avi@bridgewatersystems.com>, "David Frascone" <dave@frascone.com>
X-OriginalArrivalTime: 04 Mar 2009 16:18:04.0620 (UTC) FILETIME=[CC0620C0:01C99CE4]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=10301; t=1236183484; x=1237047484; c=relaxed/simple; s=amsdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=fbrockne@cisco.com; z=From:=20=22Frank=20Brockners=20(fbrockne)=22=20<fbrockne@c isco.com> |Subject:=20RE=3A=20[Dime]=20Dime=20rechartering=3A=20Inclu de=20Carrier-Grade=20NAT=20ControlApplication? |Sender:=20; bh=pmo4/Somlnt7xDkX6BbOm1bMMurLwIeqETzmANz0uNQ=; b=Bs3vdIwt9+Ql7drRfr0MKtzS1Ulxv7Uce0pSg8uh4YynDbn6m/FxwxsXfz UiJMVEvaXvoKRxWmraiAlCpb3KHnZgUKmNFH5OzOmDOcZT701a+Yc7RhV/Vt R3pGxbvAHV;
Authentication-Results: ams-dkim-2; header.From=fbrockne@cisco.com; dkim=pass ( sig from cisco.com/amsdkim2001 verified; ); 
Cc: dime@ietf.org
Subject: Re: [Dime] Dime rechartering: Include Carrier-Grade NAT ControlApplication?
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 16:17:40 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99CE4.CBF07F8D
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20
Quick follow-up on the discussion we've had a while back: The just
recently posted draft
http://tools.ietf.org/html/draft-brockners-diameter-nat-control-00
outlines a new Diameter application for NAT control.
=20
Appreciate your comments.
=20
Thanks, Frank


________________________________

	From: Avi Lior [mailto:avi@bridgewatersystems.com]=20
	Sent: Friday, October 17, 2008 11:42 PM
	To: David Frascone; Frank Brockners (fbrockne)
	Cc: dime@ietf.org
	Subject: RE: [Dime] Dime rechartering: Include Carrier-Grade NAT
ControlApplication?
=09
=09
	David,
	=20
	I agree with Frank that having such an application is required
and now is the time to work on it.
	=20
	I have been engaged with several wireless operators that are
planning to deploy a CGN in the next year.  I have been developing a set
of AAA requirements to support such deployements over the past month.
	=20
	It would be good to develop those as the CGN draft is being
progressed.
	=20
	Avi=20


________________________________

		From: dime-bounces@ietf.org
[mailto:dime-bounces@ietf.org] On Behalf Of David Frascone
		Sent: October 17, 2008 9:53 AM
		To: Frank Brockners (fbrockne)
		Cc: dime@ietf.org
		Subject: Re: [Dime] Dime rechartering: Include
Carrier-Grade NAT Control Application?
	=09
	=09
		Do you think we could have a draft before the meeting?
	=09
	=09
		On Fri, Oct 17, 2008 at 4:19 AM, Frank Brockners
(fbrockne) <fbrockne@cisco.com> wrote:
	=09

			Hi,
		=09
			while re-chartering DIME, could we consider a
new application for
			Carrier-Grade NAT (CGN) control? CGN has become
an important topic
			within the IPv4-completion/exhaustion debate -
also proven by the
			significant number of drafts on this particular
topic. Consequently, per
			endpoint control of a CGN is an important
question to be addressed.
			Please find an abstract of a forthcoming draft
below. I'm working on the
			full draft, but wanted to get the abstract out
asap so that the work can
			be considered as part of the new charter.
		=09
			Thanks, Frank
		=09
			--
		=09
			Title
		=09
			  Diameter Carrier-Grade NAT Control Application
		=09
			Abstract
		=09
			  The document will describe the framework,
messages and procedures for
			  the Diameter Carrier-Grade NAT Control (CGNC)
application.  The
			Diameter
			  CGNC application allows gateways (e.g. Network
Access Server (NAS))
			to
			  interact with Carrier-Grade NAT (CGN) devices.
The interaction is to
			  establish a context to commonly identify and
manage endpoints on
			  gateway and CGN. It is to allow the gateway to
control and manage the
		=09
			  behavior of a CGN on a per-endpoint basis
(e.g. control the total
			number
			  of bindings for a particular endpoint, request
the allocation of
			  a binding for a particular endpoint). In
addition, it allows the CGN
			  to provide information relevant to accounting
purposes to the gateway
		=09
			  (e.g. allocated NAT bindings etc.).
			_______________________________________________
			DiME mailing list
			DiME@ietf.org
			https://www.ietf.org/mailman/listinfo/dime
		=09



------_=_NextPart_001_01C99CE4.CBF07F8D
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dus-ascii" =
http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18372"></HEAD>
<BODY>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2=20
face=3DArial></FONT>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2 =
face=3DArial><SPAN=20
class=3D373431316-04032009>Quick follow-up on the discussion we've had a =
while=20
back: The just recently posted draft&nbsp;<A=20
href=3D"http://tools.ietf.org/html/draft-brockners-diameter-nat-control-0=
0">http://tools.ietf.org/html/draft-brockners-diameter-nat-control-00</A>=
&nbsp;outlines=20
a new Diameter application for NAT control.</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2 =
face=3DArial><SPAN=20
class=3D373431316-04032009></SPAN></FONT>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2 =
face=3DArial><SPAN=20
class=3D373431316-04032009>Appreciate your comments.</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2 =
face=3DArial><SPAN=20
class=3D373431316-04032009></SPAN></FONT>&nbsp;</DIV>
<DIV dir=3Dltr align=3Dleft><FONT color=3D#0000ff size=3D2 =
face=3DArial><SPAN=20
class=3D373431316-04032009>Thanks, Frank</SPAN></FONT></DIV><BR>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #0000ff 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; MARGIN-RIGHT: 0px"=20
dir=3Dltr>
  <DIV dir=3Dltr lang=3Den-us class=3DOutlookMessageHeader align=3Dleft>
  <HR tabIndex=3D-1>
  <FONT size=3D2 face=3DTahoma><B>From:</B> Avi Lior=20
  [mailto:avi@bridgewatersystems.com] <BR><B>Sent:</B> Friday, October =
17, 2008=20
  11:42 PM<BR><B>To:</B> David Frascone; Frank Brockners=20
  (fbrockne)<BR><B>Cc:</B> dime@ietf.org<BR><B>Subject:</B> RE: [Dime] =
Dime=20
  rechartering: Include Carrier-Grade NAT=20
  ControlApplication?<BR></FONT><BR></DIV>
  <DIV></DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana>David,</FONT></SPAN></DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2 =
face=3DVerdana>I=20
  agree with Frank that having such an application is required and now =
is the=20
  time to work on it.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2 =
face=3DVerdana>I=20
  have been engaged with several wireless operators that are planning to =
deploy=20
  a CGN in the next year.&nbsp; I have been developing a set of AAA =
requirements=20
  to support such deployements over the past month.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2 =
face=3DVerdana>It=20
  would be good to develop those as the CGN&nbsp;draft is being=20
  progressed.</FONT></SPAN></DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana></FONT></SPAN>&nbsp;</DIV>
  <DIV><SPAN class=3D882093721-17102008><FONT color=3D#0000ff size=3D2=20
  face=3DVerdana>Avi</FONT>&nbsp;</SPAN></DIV><BR>
  <BLOCKQUOTE=20
  style=3D"BORDER-LEFT: #0000ff 2px solid; PADDING-LEFT: 5px; =
MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"=20
  dir=3Dltr>
    <DIV dir=3Dltr lang=3Den-us class=3DOutlookMessageHeader =
align=3Dleft>
    <HR tabIndex=3D-1>
    <FONT size=3D2 face=3DTahoma><B>From:</B> dime-bounces@ietf.org=20
    [mailto:dime-bounces@ietf.org] <B>On Behalf Of </B>David=20
    Frascone<BR><B>Sent:</B> October 17, 2008 9:53 AM<BR><B>To:</B> =
Frank=20
    Brockners (fbrockne)<BR><B>Cc:</B> dime@ietf.org<BR><B>Subject:</B> =
Re:=20
    [Dime] Dime rechartering: Include Carrier-Grade NAT Control=20
    Application?<BR></FONT><BR></DIV>
    <DIV></DIV>
    <DIV dir=3Dltr>Do you think we could have a draft before the =
meeting?<BR><BR>
    <DIV class=3Dgmail_quote>On Fri, Oct 17, 2008 at 4:19 AM, Frank =
Brockners=20
    (fbrockne) <SPAN dir=3Dltr>&lt;<A=20
    href=3D"mailto:fbrockne@cisco.com">fbrockne@cisco.com</A>&gt;</SPAN> =

wrote:<BR>
    <BLOCKQUOTE=20
    style=3D"BORDER-LEFT: rgb(204,204,204) 1px solid; MARGIN: 0pt 0pt =
0pt 0.8ex; PADDING-LEFT: 1ex"=20
    class=3Dgmail_quote>Hi,<BR><BR>while re-chartering DIME, could we =
consider a=20
      new application for<BR>Carrier-Grade NAT (CGN) control? CGN has =
become an=20
      important topic<BR>within the IPv4-completion/exhaustion debate - =
also=20
      proven by the<BR>significant number of drafts on this particular =
topic.=20
      Consequently, per<BR>endpoint control of a CGN is an important =
question to=20
      be addressed.<BR>Please find an abstract of a forthcoming draft =
below. I'm=20
      working on the<BR>full draft, but wanted to get the abstract out =
asap so=20
      that the work can<BR>be considered as part of the new=20
      charter.<BR><BR>Thanks, Frank<BR><BR>--<BR><BR>Title<BR><BR>&nbsp; =

      Diameter Carrier-Grade NAT Control=20
      Application<BR><BR>Abstract<BR><BR>&nbsp; The document will =
describe the=20
      framework, messages and procedures for<BR>&nbsp; the Diameter=20
      Carrier-Grade NAT Control (CGNC) application.=20
      &nbsp;The<BR>Diameter<BR>&nbsp; CGNC application allows gateways =
(e.g.=20
      Network Access Server (NAS))<BR>to<BR>&nbsp; interact with =
Carrier-Grade=20
      NAT (CGN) devices. The interaction is to<BR>&nbsp; establish a =
context to=20
      commonly identify and manage endpoints on<BR>&nbsp; gateway and =
CGN. It is=20
      to allow the gateway to control and manage the<BR><BR>&nbsp; =
behavior of a=20
      CGN on a per-endpoint basis (e.g. control the =
total<BR>number<BR>&nbsp; of=20
      bindings for a particular endpoint, request the allocation =
of<BR>&nbsp; a=20
      binding for a particular endpoint). In addition, it allows the=20
      CGN<BR>&nbsp; to provide information relevant to accounting =
purposes to=20
      the gateway<BR><BR>&nbsp; (e.g. allocated NAT bindings=20
      etc.).<BR>_______________________________________________<BR>DiME =
mailing=20
      list<BR><A href=3D"mailto:DiME@ietf.org">DiME@ietf.org</A><BR><A=20
      href=3D"https://www.ietf.org/mailman/listinfo/dime"=20
      =
target=3D_blank>https://www.ietf.org/mailman/listinfo/dime</A><BR></BLOCK=
QUOTE></DIV><BR></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C99CE4.CBF07F8D--

From Mark.Jones@bridgewatersystems.com  Wed Mar  4 10:18:22 2009
Return-Path: <Mark.Jones@bridgewatersystems.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A1D343A6B6F for <dime@core3.amsl.com>; Wed,  4 Mar 2009 10:18:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.499
X-Spam-Level: 
X-Spam-Status: No, score=-2.499 tagged_above=-999 required=5 tests=[AWL=0.100,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5-ja6hRt5cMJ for <dime@core3.amsl.com>; Wed,  4 Mar 2009 10:18:21 -0800 (PST)
Received: from webmail.bridgewatersystems.com (webmail.bridgewatersystems.com [66.46.199.134]) by core3.amsl.com (Postfix) with ESMTP id A9E5428C419 for <dime@ietf.org>; Wed,  4 Mar 2009 10:18:04 -0800 (PST)
Received: from exchange02.bridgewatersys.com ([192.168.150.32]) by exchange02.bridgewatersys.com ([192.168.150.32]) with mapi; Wed, 4 Mar 2009 13:18:31 -0500
From: Mark Jones <Mark.Jones@bridgewatersystems.com>
To: "dime@ietf.org" <dime@ietf.org>
Date: Wed, 4 Mar 2009 13:18:30 -0500
Thread-Topic: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
Thread-Index: AcmcBaTaDMAVqRaFRn6FRU/yJWMIggA7pxtg
Message-ID: <D6824C8074596B4E9CA38F6A62454F5C0A400136F6@exchange02.bridgewatersys.com>
References: <07c701c99986$73684350$2ab5b70a@nsnintra.net> <72D5BF85-3093-4781-99CD-9ABC5FAE12E2@gmail.com> <49AC6217.4080401@tari.toshiba.com>
In-Reply-To: <49AC6217.4080401@tari.toshiba.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 18:18:22 -0000

I also support removing these parameters in order to move forward with the =
QoS drafts. The Diameter QoS parameters draft is defining one possible QoS =
template but the QoS attributes draft allows a set of supported QoS profile=
s to be negotiated. So a new QoS profile template can be defined later for =
the tsvwg parameters when they are stable.=20

Regards
Mark

> -----Original Message-----
> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
> Behalf Of Victor Fajardo
> Sent: March 2, 2009 17:48
> To: jouni korhonen
> Cc: dime@ietf.org
> Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>=20
> I agree.
>=20
> > Hi all,
> >
> > I would support removing as well. Be done with it and move=20
> on with the
> > QoS parameter document. Those features that were in the=20
> tsvwg document
> > can be documented later in a separate document, when and if needed.
> >
> > Cheers,
> >     Jouni
> >
> >
> > On Feb 28, 2009, at 11:25 AM, Hannes Tschofenig wrote:
> >
> >> Hi all,
> >>
> >> we have a normative reference in the Diameter QoS parameter draft
> >>=20
> http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parame
> ters-09.txt
> >>
> >> pointing to
> >> http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
> >>
> >> Yesterday, Magnus posted a mail to the TSVWG list that
> >> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems
> >> getting
> >> through the IESG and the document bounced back to the=20
> working group. The
> >> mail can be found here:
> >> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
> >>
> >> Now, there is the risk of considerable delay in publication of our
> >> Diameter
> >> QoS parameter document as it will be blocked (for=20
> potentially a long
> >> time).
> >> Since the Diameter QoS attribute and the Diameter QoS application
> >> document
> >> normatively depend on the QoS parameter document they will=20
> be blocked as
> >> well.
> >>
> >> So, I have been thinking of what we could do to deal with=20
> this issue and
> >> here is a proposal to the group.
> >>
> >> ***************
> >> My proposal is to move the priority parameters (Priority AVP,
> >> Admission-Priority AVP, and ALRP AVP) into a separate=20
> document and to
> >> progress them independently to get the main part of the=20
> Diameter QoS
> >> parameters document finalized.
> >> ***************
> >>
> >> Please let me know if you find this idea acceptable.=20
> Please respond as
> >> quickly as possible!
> >>
> >> Ciao
> >> Hannes
> >>
> >> PS: We would have to find an editor and authors for that the new
> >> document
> >> that contains the priority parameters but we can worry=20
> about that part
> >> larter.
> >>
> >> _______________________________________________
> >> DiME mailing list
> >> DiME@ietf.org
> >> https://www.ietf.org/mailman/listinfo/dime
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> >
> >
>=20
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
> =

From vfajardo@tari.toshiba.com  Wed Mar  4 14:02:36 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8CC3F3A6C50 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 14:02:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.069
X-Spam-Level: 
X-Spam-Status: No, score=-2.069 tagged_above=-999 required=5 tests=[AWL=0.530,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vkfruUnnb26p for <dime@core3.amsl.com>; Wed,  4 Mar 2009 14:02:35 -0800 (PST)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id E46523A6CAB for <dime@ietf.org>; Wed,  4 Mar 2009 14:02:25 -0800 (PST)
Received: from [127.0.0.1] (mail.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n24LvZih080519; Wed, 4 Mar 2009 16:57:38 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49AEFA71.9070608@tari.toshiba.com>
Date: Wed, 04 Mar 2009 17:02:25 -0500
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: lionel.morand@orange-ftgroup.com
References: <7DBAFEC6A76F3E42817DF1EBE64CB02606456C6A@ftrdmel2>	<00ac01c99cc2$b5d76330$9001a8c0@xxxx87e842e29b> <7DBAFEC6A76F3E42817DF1EBE64CB02606456D4A@ftrdmel2>
In-Reply-To: <7DBAFEC6A76F3E42817DF1EBE64CB02606456D4A@ftrdmel2>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 22:02:36 -0000

Hi Fortune,
> I'm not sure to understand but I might have missed something.
> >From a syntax point of view, what is the difference between a FQDN and a realm?
> What would be the "potential" impacts to say that the DiameterIdentity can be a FQDN or a realm?
>   
I have the same question as Lionel. Syntactically, FQDN and realm are 
the same from the parsers point of view. The difference is in semantics 
which is already specified by the AVP having that type.

regards,
victor


From glenzorn@comcast.net  Wed Mar  4 15:15:43 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 43D2828C34A for <dime@core3.amsl.com>; Wed,  4 Mar 2009 15:15:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.289
X-Spam-Level: 
X-Spam-Status: No, score=-2.289 tagged_above=-999 required=5 tests=[AWL=0.310,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dFibUNgFf7IM for <dime@core3.amsl.com>; Wed,  4 Mar 2009 15:15:42 -0800 (PST)
Received: from QMTA06.emeryville.ca.mail.comcast.net (qmta06.emeryville.ca.mail.comcast.net [76.96.30.56]) by core3.amsl.com (Postfix) with ESMTP id 63F5628C330 for <dime@ietf.org>; Wed,  4 Mar 2009 15:15:42 -0800 (PST)
Received: from OMTA12.emeryville.ca.mail.comcast.net ([76.96.30.44]) by QMTA06.emeryville.ca.mail.comcast.net with comcast id Nzut1b0050x6nqcA6BGBGr; Wed, 04 Mar 2009 23:16:11 +0000
Received: from gwzPC ([24.18.239.198]) by OMTA12.emeryville.ca.mail.comcast.net with comcast id PBGA1b00X4HXf1k8YBGBpE; Wed, 04 Mar 2009 23:16:11 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: "'Victor Fajardo'" <vfajardo@tari.toshiba.com>, <lionel.morand@orange-ftgroup.com>
References: <7DBAFEC6A76F3E42817DF1EBE64CB02606456C6A@ftrdmel2>	<00ac01c99cc2$b5d76330$9001a8c0@xxxx87e842e29b> <7DBAFEC6A76F3E42817DF1EBE64CB02606456D4A@ftrdmel2> <49AEFA71.9070608@tari.toshiba.com>
In-Reply-To: <49AEFA71.9070608@tari.toshiba.com>
Date: Wed, 4 Mar 2009 15:15:57 -0800
Message-ID: <01f401c99d1f$2d25f8a0$8771e9e0$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
thread-index: AcmdFOq+QmJApq+0Q/i5N93lPP56FQAChEOw
Content-Language: en-us
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 23:15:43 -0000

Victor Fajardo [mailto:vfajardo@tari.toshiba.com] writes:

> Hi Fortune,
> > I'm not sure to understand but I might have missed something.
> > >From a syntax point of view, what is the difference between a FQDN
> and a realm?
> > What would be the "potential" impacts to say that the
> DiameterIdentity can be a FQDN or a realm?
> >
> I have the same question as Lionel. Syntactically, FQDN and realm are
> the same from the parsers point of view. 

Yes.

> The difference is in semantics
> which is already specified by the AVP having that type.

???

> 
> regards,
> victor


From glenzorn@comcast.net  Wed Mar  4 15:18:53 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2757A28C1F8 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 15:18:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.367
X-Spam-Level: 
X-Spam-Status: No, score=-2.367 tagged_above=-999 required=5 tests=[AWL=0.232,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BJTpcYqYt-sK for <dime@core3.amsl.com>; Wed,  4 Mar 2009 15:18:52 -0800 (PST)
Received: from QMTA01.emeryville.ca.mail.comcast.net (qmta01.emeryville.ca.mail.comcast.net [76.96.30.16]) by core3.amsl.com (Postfix) with ESMTP id 57B6A28C3C9 for <dime@ietf.org>; Wed,  4 Mar 2009 15:18:29 -0800 (PST)
Received: from OMTA04.emeryville.ca.mail.comcast.net ([76.96.30.35]) by QMTA01.emeryville.ca.mail.comcast.net with comcast id P7fe1b00A0lTkoCA1BJyQn; Wed, 04 Mar 2009 23:18:58 +0000
Received: from gwzPC ([24.18.239.198]) by OMTA04.emeryville.ca.mail.comcast.net with comcast id PBJx1b00N4HXf1k8QBJyju; Wed, 04 Mar 2009 23:18:58 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: <dime@ietf.org>
Date: Wed, 4 Mar 2009 15:18:44 -0800
Message-ID: <020701c99d1f$90c0c7f0$b24257d0$@net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0208_01C99CDC.829D87F0"
X-Mailer: Microsoft Office Outlook 12.0
thread-index: AcmdH0aNdWhaqUzCRYulwr8b7XpfKwAAD53g
Content-Language: en-us
Subject: [Dime] FW: I-D Action:draft-zorn-dime-capablities-update-00.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2009 23:18:53 -0000

This is a multipart message in MIME format.

------=_NextPart_000_0208_01C99CDC.829D87F0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

FYI

-----Original Message-----
From: i-d-announce-bounces@ietf.org [mailto:i-d-announce-bounces@ietf.org]
On Behalf Of Internet-Drafts@ietf.org
Sent: Wednesday, March 04, 2009 3:15 PM
To: i-d-announce@ietf.org
Subject: I-D Action:draft-zorn-dime-capablities-update-00.txt 

A New Internet-Draft is available from the on-line Internet-Drafts
directories.

	Title           : The Diameter Capabilities Update Application
	Author(s)       : G. Zorn, J. Kang
	Filename        : draft-zorn-dime-capablities-update-00.txt
	Pages           : 7
	Date            : 2009-03-04

This document defines a new Diameter application and associated command
codes.  The Capabilities Update application is intended to allow the dynamic
update of Diameter peer capabilities while the peer-to-peer connection is in
the open state.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-zorn-dime-capablities-update-00.tx
t

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

------=_NextPart_000_0208_01C99CDC.829D87F0
Content-Type: Message/External-body;
	name="draft-zorn-dime-capablities-update-00.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename="draft-zorn-dime-capablities-update-00.txt"

Content-Type: text/plain
Content-ID: <2009-03-04150441.I-D@ietf.org>


------=_NextPart_000_0208_01C99CDC.829D87F0
Content-Type: text/plain;
	name="ATT00511.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename="ATT00511.txt"

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

------=_NextPart_000_0208_01C99CDC.829D87F0--


From fqhuang@huawei.com  Wed Mar  4 18:45:51 2009
Return-Path: <fqhuang@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE6163A6B43 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 18:45:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.294
X-Spam-Level: 
X-Spam-Status: No, score=-1.294 tagged_above=-999 required=5 tests=[AWL=3.305,  BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R+3cAdempoWp for <dime@core3.amsl.com>; Wed,  4 Mar 2009 18:45:50 -0800 (PST)
Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 91E163A6A40 for <dime@ietf.org>; Wed,  4 Mar 2009 18:45:45 -0800 (PST)
Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KG000E95ID08C@szxga03-in.huawei.com> for dime@ietf.org; Thu, 05 Mar 2009 10:46:12 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KG0004U5ID09U@szxga03-in.huawei.com> for dime@ietf.org; Thu, 05 Mar 2009 10:46:12 +0800 (CST)
Received: from h36145c ([10.70.39.123]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KG000MEHID0SE@szxml05-in.huawei.com> for dime@ietf.org; Thu, 05 Mar 2009 10:46:12 +0800 (CST)
Date: Thu, 05 Mar 2009 10:46:12 +0800
From: Fortune HUANG <fqhuang@huawei.com>
In-reply-to: <49AEFA71.9070608@tari.toshiba.com>
To: 'Victor Fajardo' <vfajardo@tari.toshiba.com>, lionel.morand@orange-ftgroup.com
Message-id: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Thread-index: AcmdGPOwer0ysEwxSU6RQedtiODYGwAGBwuQ
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 02:45:51 -0000

 
Hi all,

In section 1.3 of 3588bis, 
"Realm

      The string in the NAI that immediately follows the '@' character.
      NAI realm names are required to be unique, and are piggybacked on
      the administration of the DNS namespace.  Diameter makes use of
      the realm, also loosely referred to as domain, to determine
      whether messages can be satisfied locally, or whether they must be
      routed or redirected.  In RADIUS, realm names are not necessarily
      piggybacked on the DNS namespace but may be independent of it.
"
So I think the format of realm shoud be compliant with RFC4282.

In section 2.1 of RFC4282, the grammar for the realm is  an updated version
of [RFC1035].
"
realm       =  1*( label "." ) label
label       =  let-dig *(ldh-str)
ldh-str     =  *( alpha / digit / "-" ) let-dig
let-dig     =  alpha / digit
alpha       =  %x41-5A  ; 'A'-'Z'
alpha       =/ %x61-7A  ; 'a'-'z'
digit       =  %x30-39  ; '0'-'9'
"
In section 9 of RFC4566
"FQDN =                4*(alpha-numeric / "-" / ".")
                         ; fully qualified domain name as specified
                         ; in RFC 1035 (and updates)
"

Section 2.3.1 of RFC1035
"
<domain> ::= <subdomain> | " "

<subdomain> ::= <label> | <subdomain> "." <label>

<label> ::= <letter> [ [ <ldh-str> ] <let-dig> ]

<ldh-str> ::= <let-dig-hyp> | <let-dig-hyp> <ldh-str>

<let-dig-hyp> ::= <let-dig> | "-"

<let-dig> ::= <letter> | <digit>

<letter> ::= any one of the 52 alphabetic characters A through Z in
upper case and a through z in lower case

<digit> ::= any one of the ten digits 0 through 9
"

My conclusion after comparing the grammars of the three RFCs: 
1) According to the above RFC4282 grammar, "2.a " is a valid realm.
2) According to the above RFC4566 grammar, "2.a " is not a valid FQDN since
it has only 3 characters (not 4 or more).
3) According to the above RFC1035 grammar, "2.a" is not a valid domain since
it doesn't start with a letter (but a digit).

If one could prove that the grammar of realm is the same as the grammar of
FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven inconsistent
according.

However, I am not sure if I have found the right place where the strict
grammar of FQDN is defined. Please tell me if you know.
But RFC4566 and RFC1035 were the materials my comment in the previous email
was based on. 


Best Regards,
Fortune

-----Original Message-----
From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com] 
Sent: Thursday, March 05, 2009 6:02 AM
To: lionel.morand@orange-ftgroup.com
Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
RFC3588bis

Hi Fortune,
> I'm not sure to understand but I might have missed something.
> >From a syntax point of view, what is the difference between a FQDN and a
realm?
> What would be the "potential" impacts to say that the DiameterIdentity can
be a FQDN or a realm?
>   
I have the same question as Lionel. Syntactically, FQDN and realm are the
same from the parsers point of view. The difference is in semantics which is
already specified by the AVP having that type.

regards,
victor


From hannes.tschofenig@nsn.com  Wed Mar  4 22:25:30 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D67EB3A691E for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:25:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.164
X-Spam-Level: 
X-Spam-Status: No, score=-5.164 tagged_above=-999 required=5 tests=[AWL=0.435,  BAYES_00=-2.599, J_BACKHAIR_23=1, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b0AqUo1tEQl7 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:25:29 -0800 (PST)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id 629173A67FF for <dime@ietf.org>; Wed,  4 Mar 2009 22:25:24 -0800 (PST)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n256PoJI020745 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 5 Mar 2009 07:25:50 +0100
Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n256Poc5023204; Thu, 5 Mar 2009 07:25:50 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Thu, 5 Mar 2009 07:25:50 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 5 Mar 2009 08:26:52 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45011DBA94@FIESEXC015.nsn-intra.net>
In-Reply-To: <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
Thread-Index: AcmcsIKjOXuawNl9THyYBBXmyJIpsAAqnygA
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com><020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "ext Julien Bournelle" <julien.bournelle@gmail.com>, "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
X-OriginalArrivalTime: 05 Mar 2009 06:25:50.0484 (UTC) FILETIME=[3A710540:01C99D5B]
Cc: dime@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 06:25:31 -0000

Hi Julien,=20

>hi hannes,
>
> see inline,
>
>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig=20
><Hannes.Tschofenig@gmx.net> wrote:
>> Hi Julien,
>>
>> When we discussed this at the phone conference call (and the=20
>> discussion is also captured in the meeting minutes) then I thought=20
>> that the conclusion was to define a new Diameter application=20
>for this exchange:
>>
>>
>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0Server
>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0=3D=3D=3D=3D=3D=3D
>>
>> =A0 =A0[<-- EAP-Initiate/ -----
>> =A0 =A0 =A0 =A0Re-auth-Start]
>> =A0 =A0[<-- EAP-Request/ ------
>> =A0 =A0 =A0 =A0Identity]
>>
>>
>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0Re-auth/
>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>>
>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
Re-auth/
>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
>>
>> =A0 Note: [] brackets indicate optionality.
>>
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP =
Exchange
>>
>> (The server in the figure above is the HOKEY server, a dedicated=20
>> entity.)
>>
>>
>> The initial EAP authentication is left untouched and, as Glen=20
>> explained us, there is the assumption that the AAA entities work=20
>> together with the HOKEY servers in a non-standardized way.=20
>To me that sounded like a good plan.
>>
>> Does this make any sense?
>
> Taking into accounts that we have one app-id for Diameter EAP=20
>(I would say NASREQ-EAP) AND soon another app-id for Diameter=20
>MIP6 (which also use EAP for authentication). It certainly=20
>make sense to not reuse the same App-ID for ERP if we want to=20
>use ERP for the mip6 case.

You are pointing to some of the challenges we had during the Diameter =
extensibility discussions.=20

With Diameter Mobile IPv6 you are referring to the HA<->AAA server =
interaction. If you want to cover that case as well and you would like =
to ensure that messages are correctly understood and correctly routed =
then you need to define an application that does all these different =
things. If you are OK with optional parts then you can just define your =
application and allow other AVPs, namely those from the Diameter =
Mobility stuff to get included.=20

Ciao
Hannes

>
> Let's see if others have opinion.
>
> Regards,
>
> Julien
>
>>
>>
>> The non-HOKEY expert
>> Hannes
>>
>> PS: I never said that this is specific document is going to=20
>be trivial=20
>> :-)
>>
>>>-----Original Message-----
>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf=20
>>>Of Julien Bournelle
>>>Sent: 04 March, 2009 09:05
>>>To: dime@ietf.org
>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>>(non-roaming case)
>>>
>>>Hi all,
>>>
>>> we try to solve the issue concerning the need for a new=20
>App-Id or not.
>>>
>>> The ERP protocol (RFC 5296) is to be used along with EAP. It=20
>>>basically defines two new EAP codes and uses keying material derived=20
>>>from a first EAP authentication.
>>>
>>> To start the discussion, let's take the non-roaming case.
>>>
>>> In non-roaming, we have first an EAP authentication using Diameter=20
>>>EAP.
>>> Then, for reauthentication using ERP, we have two messages
>>>(Request/Response) =A0between NAS and the AAA/ERP server carrying EAP =

>>>packets
>>>
>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>>
>>> So, either we reuse the Diameter EAP Application (DER/DEA) or we=20
>>>define a new Diameter Application.
>>>
>>> If we use a new Diameter Application, a new Diameter=20
>session will be=20
>>>created and eventually a new Diameter server will be reached. What=20
>>>bothers me in this case is that we basically perform a=20
>>>reauthentication for the same session which is primarly=20
>handled at the=20
>>>AAA/EAP server. So, i'm wondering what happens concerning=20
>>>Authorization Lifetime session etc..
>>>
>>> Note that I still don't have strong opinion and I'll be=20
>glad to hear=20
>>>opinions from others.
>>>
>>> Regards,
>>>
>>> Julien
>>>_______________________________________________
>>>DiME mailing list
>>>DiME@ietf.org
>>>https://www.ietf.org/mailman/listinfo/dime
>>>
>>
>>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>

From hannes.tschofenig@nsn.com  Wed Mar  4 22:49:29 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0FE423A6A25 for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:49:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.18
X-Spam-Level: 
X-Spam-Status: No, score=-3.18 tagged_above=-999 required=5 tests=[AWL=-1.581,  BAYES_00=-2.599, J_BACKHAIR_23=1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UYiZwqe0GKJn for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:49:28 -0800 (PST)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 035F43A67E5 for <dime@ietf.org>; Wed,  4 Mar 2009 22:49:27 -0800 (PST)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n256nsnl012640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Thu, 5 Mar 2009 07:49:54 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n256nsIr019705 for <dime@ietf.org>; Thu, 5 Mar 2009 07:49:54 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Thu, 5 Mar 2009 07:49:54 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 5 Mar 2009 08:50:56 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45011DBAC1@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Agenda for the DIME meeting
Thread-Index: AcmdXrwiPw2iISY3TVSRFEvwifYFLg==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 05 Mar 2009 06:49:54.0286 (UTC) FILETIME=[9703B8E0:01C99D5E]
Subject: [Dime] Agenda for the DIME meeting
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 06:49:29 -0000

Diameter Maintenance and Extensions WG
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

TUESDAY, March 24, 2009
Room: Franciscan A

[Chair's Note: Once the deadlines are over I will put=20
info about the duration of each presentation in there.]

* WG Status, Agenda Bashing (Hannes,Dave)

* Diameter API (Dave)
http://tools.ietf.org/wg/dime/draft-ietf-dime-diameter-api/

 Note: Will only be discussed if there are open issues.
       Final decision depends on the document being submitted
	   at the draft submission deadline.=20

* Diameter Base protocol (Victor)
http://tools.ietf.org/wg/dime/draft-ietf-dime-rfc3588bis/

 Note: Will only be discussed if there are open issues.
       2nd WGLC comments could get discussed.
=20
* Diameter QoS parameters (Hannes)=20
http://tools.ietf.org/wg/dime/draft-ietf-dime-qos-parameters/

 Note: Will only be discussed if there are open issues.
       Depends a bit on how much feedback we get regarding the=20
       priority AVPs.	  =20

* Diameter QoS attributes (Mark)
http://tools.ietf.org/wg/dime/draft-ietf-dime-qos-attributes/

 Note: Will only be discussed if there are open issues. Dan's=20
       AD review may reveal new open issues.=20

* Diameter Mobile IPv6: HA<->AAA Server (Jouni)
http://tools.ietf.org/wg/dime/draft-ietf-dime-mip6-split/

 Note: Will only be discussed if there are open issues.
       We might get comments from Dan.=20
	  =20
* Diameter ERP (Lakshminath/Julien/Lionel/Sebastien)
http://tools.ietf.org/wg/dime/draft-ietf-dime-erp/	  =20
=20
 Note: Fundamental design decisions have to be made=20
       around this time.=20
	=09
* Diameter Proxy Mobile IPv6 (Jouni)
http://tools.ietf.org/wg/dime/draft-ietf-dime-pmip6/

 Note: Will only be discussed if there are open issues.
       WGLC comments could get discussed.

* Diameter User-Name and Realm Based Request Routing=20
  Clarifications (Jouni)
http://tools.ietf.org/wg/dime/draft-ietf-dime-nai-routing/

 Note: Will only be discussed if there are open issues.
       Final decision depends on the document being submitted
    at the draft submission deadline.=20
=09
* The Diameter Capabilities Update Application (Glen)
http://www.ietf.org/internet-drafts/draft-zorn-dime-capablities-update-0
0.txt

 Note: New document. Decision has to be made whether we=20
       should work on this in DIME.=20
	  =20
* Diameter NAT Control Application (Frank)
http://tools.ietf.org/html/draft-brockners-diameter-nat-control-00.txt

 Note: New document. Decision has to be made whether we=20
       should work on this in DIME.=20

* Diameter Routing (Glen)

 Note: I have not yet seen the draft(s) that Glen had mentioned=20
       during the virtual interim meeting.

From hannes.tschofenig@nsn.com  Wed Mar  4 22:58:44 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A50B53A6ADE for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:58:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.624
X-Spam-Level: 
X-Spam-Status: No, score=-3.624 tagged_above=-999 required=5 tests=[AWL=-1.025, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zLJl94w6WrWa for <dime@core3.amsl.com>; Wed,  4 Mar 2009 22:58:43 -0800 (PST)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 7774F3A6895 for <dime@ietf.org>; Wed,  4 Mar 2009 22:58:43 -0800 (PST)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n256xBiW028084 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Thu, 5 Mar 2009 07:59:11 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n256xBMT003469 for <dime@ietf.org>; Thu, 5 Mar 2009 07:59:11 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Thu, 5 Mar 2009 07:58:56 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 5 Mar 2009 08:59:58 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45011DBAD7@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: WG Status (5th March.2009)
Thread-Index: AcmdX/9U/yAxrzPcR1W8KL8C6J2ZVw==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 05 Mar 2009 06:58:56.0538 (UTC) FILETIME=[DA38CFA0:01C99D5F]
Subject: [Dime] WG Status (5th March.2009)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 06:58:44 -0000

The Diameter API
 -> Document is pending on an update from Dave. Victor is going to help
with the document if Dave sends him the XML file.=20

Diameter Mobile IPv6: Support for Home Agent to Diameter Server
Interaction
 -> Dan will review the document beginning of next week. Then, the
document will go into IETF Last Call, which would be completed by the
IETF week.=20

Diameter Base Protocol
 -> Waiting for reviews. Have not arrived yet. WGLC starting on Monday
(2 weeks) and then we can wrap the document by the IETF meeting. =20

Quality of Service Parameters for Usage with Diameter
 -> Open issue posted to the mailing list with regard to priority &
preemption. Please provide feedback to close this open issue.=20

Quality of Service Attributes for Diameter
 -> Publication requested. Waiting for Dan to progress the document.=20

Diameter Quality of Service Application
 -> Publication request will follow soon. Victor is PROTO shepherd.=20

Diameter Applications Design Guidelines
 -> Will be on the plate after the Diameter Base specification is
finished. New version expected during March.=20

Diameter Support for EAP Re-authentication Protocol
 -> Work in progress. Important design decisions have to be made now.=20

Diameter Proxy Mobile IPv6: Support For Mobile Access Gateway and Local
Mobility Anchor to Diameter Server Interaction
 -> New version will be ready for WGLC, according to the authors.=20

Diameter User-Name and Realm Based Request Routing Clarifications
 -> WGLC started a few weeks ago. Hannes is PROTO shepherd. Comments are
being incorporated into the document.=20
    New version will be available for the deadline.=20

Diameter Routing Design Team
 -> Glen mentioned that he is going to submit a solution draft by the
deadline.
    Part of the design team does not like a solution for routing pinning
on the level of a host.=20
    Glen wants to write a vendor-specific document that is sent directly
to the RFC Editor (independent submission).=20

From lionel.morand@orange-ftgroup.com  Thu Mar  5 00:41:11 2009
Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5ECBC28C19F for <dime@core3.amsl.com>; Thu,  5 Mar 2009 00:41:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.249
X-Spam-Level: 
X-Spam-Status: No, score=-3.249 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PhITryoyyBxo for <dime@core3.amsl.com>; Thu,  5 Mar 2009 00:41:10 -0800 (PST)
Received: from p-mail2.rd.francetelecom.com (p-mail2.rd.francetelecom.com [195.101.245.16]) by core3.amsl.com (Postfix) with ESMTP id 3B0F128C1AF for <dime@ietf.org>; Thu,  5 Mar 2009 00:41:10 -0800 (PST)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.193.117.153]) by ftrdsmtp2.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959);  Thu, 5 Mar 2009 09:41:35 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 5 Mar 2009 09:41:35 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB02606456F9F@ftrdmel2>
In-Reply-To: <01f401c99d1f$2d25f8a0$8771e9e0$@net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
Thread-Index: AcmdFOq+QmJApq+0Q/i5N93lPP56FQAChEOwABOfp5A=
References: <7DBAFEC6A76F3E42817DF1EBE64CB02606456C6A@ftrdmel2>	<00ac01c99cc2$b5d76330$9001a8c0@xxxx87e842e29b> <7DBAFEC6A76F3E42817DF1EBE64CB02606456D4A@ftrdmel2> <49AEFA71.9070608@tari.toshiba.com> <01f401c99d1f$2d25f8a0$8771e9e0$@net>
From: <lionel.morand@orange-ftgroup.com>
To: <glenzorn@comcast.net>, <vfajardo@tari.toshiba.com>
X-OriginalArrivalTime: 05 Mar 2009 08:41:35.0886 (UTC) FILETIME=[317ABAE0:01C99D6E]
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 08:41:11 -0000

Hi Victor, Glen

> -----Message d'origine-----
> De : Glen Zorn [mailto:glenzorn@comcast.net]=20
> Envoy=E9 : jeudi 5 mars 2009 00:16
> =C0 : 'Victor Fajardo'; MORAND Lionel RD-CORE-ISS
> Cc : fqhuang@huawei.com; dime@ietf.org
> Objet : RE: [Dime] Problem with Origin- & Destination-Realm=20
> AVPs in RFC3588bis
>=20
> Victor Fajardo [mailto:vfajardo@tari.toshiba.com] writes:
>=20
> > Hi Fortune,
> > > I'm not sure to understand but I might have missed something.
> > > >From a syntax point of view, what is the difference=20
> between a FQDN
> > and a realm?
> > > What would be the "potential" impacts to say that the
> > DiameterIdentity can be a FQDN or a realm?
> > >
> > I have the same question as Lionel. Syntactically, FQDN and=20
> realm are=20
> > the same from the parsers point of view.
>=20
> Yes.
>=20
> > The difference is in semantics
> > which is already specified by the AVP having that type.
>=20
> ???

I think that it is exactly what Glen was pointing out. The "current" =
definition of the AVP relies on the use of the DiameterIdentity format =
that it is itself defined as only identifying a FQDN. It is where there =
is an inconstency and it is why I proposed the modified definition of =
the DiameterIdentity format.


Glen, Would the proposed modification of the definition of the =
DiameterIdentity close the issue?

BR,

Lionel

From jouni.nospam@gmail.com  Thu Mar  5 01:42:25 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8806C28C1C3 for <dime@core3.amsl.com>; Thu,  5 Mar 2009 01:42:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.147
X-Spam-Level: 
X-Spam-Status: No, score=-3.147 tagged_above=-999 required=5 tests=[AWL=1.452,  BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rxuJylz-qK2F for <dime@core3.amsl.com>; Thu,  5 Mar 2009 01:42:24 -0800 (PST)
Received: from mail-ew0-f177.google.com (mail-ew0-f177.google.com [209.85.219.177]) by core3.amsl.com (Postfix) with ESMTP id 176ED28C1F5 for <dime@ietf.org>; Thu,  5 Mar 2009 01:42:23 -0800 (PST)
Received: by ewy25 with SMTP id 25so2936853ewy.37 for <dime@ietf.org>; Thu, 05 Mar 2009 01:42:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=RNEjhzgSeL2UTEddBfILj9kDnLemfllk0eSXrpfJRfY=; b=c0HX0QYLCCMFcnAMlfzwthdnjuF+zC8XO18L1zwM5XB7NXPhiIlU7WuUPRRk5kzPMj J1pEBYU0349lYVh1rBMaq0RfCVGocU2NMYrHyAhUi4EL8JL6APcO6aMiwjUfVKORd1CB rk0tbmrHZEyb8MHhPew81CDb3zznnF/y5zXLg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=e4RuXDelGG2PvNNTW9tG1VF7CfawYqT6jaouXyk3z7w9jhiDZNzTgr2I+LnOtOA8Uf S7VWyigtPaXH8kubRe6gYDfrgQEQPxj0DyqmCKRVhsc1iHlqhAH6Q2J4kKJOlAxfH+Fa hrbIrQwCAcX4ZIsJY26CvxA8ahVHmD9PmSQ8A=
Received: by 10.216.55.211 with SMTP id k61mr465859wec.95.1236246172384; Thu, 05 Mar 2009 01:42:52 -0800 (PST)
Received: from ?10.183.180.98? ([192.100.124.156]) by mx.google.com with ESMTPS id d25sm10596566nfh.10.2009.03.05.01.42.51 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 05 Mar 2009 01:42:52 -0800 (PST)
Message-Id: <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Fortune HUANG <fqhuang@huawei.com>
In-Reply-To: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Thu, 5 Mar 2009 11:42:50 +0200
References: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com>
X-Mailer: Apple Mail (2.930.3)
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 09:42:25 -0000

Hi Fortune,


On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:

[snip]


>
> My conclusion after comparing the grammars of the three RFCs:
> 1) According to the above RFC4282 grammar, "2.a " is a valid realm.

Correct.

>
> 2) According to the above RFC4566 grammar, "2.a " is not a valid  
> FQDN since
> it has only 3 characters (not 4 or more).

First, RFC4566 ABNF is not in a role for defining FQDN.. it is an ABNF  
for SDP grammar. So if the SDP grammar ABNF is wrong, it is not the  
problem of original FQDN ABNF. Besides, using "2.a" as an example is  
misleading. There is no root zones that are one character long (see  
ICP-1, RFC1591). The shortest root zone is two characters, which would  
e.g. be "2.ac" and this is correct according to the ABNF in RFC4566.  
The RFC1035 BNF would allow one character root zones, however, those  
just do not exist in Internet DNS.

>
> 3) According to the above RFC1035 grammar, "2.a" is not a valid  
> domain since
> it doesn't start with a letter (but a digit).

RFC1101 updates RFC1035 and relaxes the issue with a digit being the  
first character.


> If one could prove that the grammar of realm is the same as the  
> grammar of
> FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven inconsistent
> according.

So far, no problems with cases 2) and 3). Regarding the case 1) few  
notes. RFC3588bis section 1.3. states that "NAI realm names are  
required to be unique, and are piggybacked on the administration of  
the DNS namespace." This basically means one loses its rights for  
"creative" realm names when used with Diameter. In DNS, one character  
root zones do not exist, thus "2.a" is not legal within Diameter scope.

> However, I am not sure if I have found the right place where the  
> strict
> grammar of FQDN is defined. Please tell me if you know.
> But RFC4566 and RFC1035 were the materials my comment in the  
> previous email
> was based on.

Although this stuff is spread a bit around and topped with de-facto  
assumptions, I think there is no issue.

Cheers,
	Jouni




>
>
>
> Best Regards,
> Fortune
>
> -----Original Message-----
> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
> Sent: Thursday, March 05, 2009 6:02 AM
> To: lionel.morand@orange-ftgroup.com
> Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
> RFC3588bis
>
> Hi Fortune,
>> I'm not sure to understand but I might have missed something.
>>> From a syntax point of view, what is the difference between a FQDN  
>>> and a
> realm?
>> What would be the "potential" impacts to say that the  
>> DiameterIdentity can
> be a FQDN or a realm?
>>
> I have the same question as Lionel. Syntactically, FQDN and realm  
> are the
> same from the parsers point of view. The difference is in semantics  
> which is
> already specified by the AVP having that type.
>
> regards,
> victor
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime


From lionel.morand@orange-ftgroup.com  Thu Mar  5 01:49:46 2009
Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93CA228C33A for <dime@core3.amsl.com>; Thu,  5 Mar 2009 01:49:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.249
X-Spam-Level: 
X-Spam-Status: No, score=-4.249 tagged_above=-999 required=5 tests=[AWL=1.000,  BAYES_00=-2.599, GB_I_LETTER=-2, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QxVk+sGCOHm6 for <dime@core3.amsl.com>; Thu,  5 Mar 2009 01:49:45 -0800 (PST)
Received: from p-mail2.rd.francetelecom.com (p-mail2.rd.francetelecom.com [195.101.245.16]) by core3.amsl.com (Postfix) with ESMTP id 3446D28C297 for <dime@ietf.org>; Thu,  5 Mar 2009 01:49:45 -0800 (PST)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.193.117.153]) by ftrdsmtp1.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959);  Thu, 5 Mar 2009 10:50:12 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 5 Mar 2009 10:50:10 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB0260645703F@ftrdmel2>
In-Reply-To: <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
Thread-Index: AcmdduUpH1VzC3GKRGazlHw4ArDpmQAAM/HA
References: <008c01c99d3c$8bb36c00$7b27460a@china.huawei.com> <68275C95-3411-45C6-B1F8-95A4F1836EFD@gmail.com>
From: <lionel.morand@orange-ftgroup.com>
To: <jouni.nospam@gmail.com>, <fqhuang@huawei.com>
X-OriginalArrivalTime: 05 Mar 2009 09:50:12.0371 (UTC) FILETIME=[C7187E30:01C99D77]
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 09:49:46 -0000

Hi Jouni,

It is also my understanding.

Lionel=20

> -----Message d'origine-----
> De : jouni korhonen [mailto:jouni.nospam@gmail.com]=20
> Envoy=E9 : jeudi 5 mars 2009 10:43
> =C0 : Fortune HUANG
> Cc : 'Victor Fajardo'; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> Objet : Re: [Dime] Problem with Origin- & Destination-Realm=20
> AVPs in RFC3588bis
>=20
>=20
> Hi Fortune,
>=20
>=20
> On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:
>=20
> [snip]
>=20
>=20
> >
> > My conclusion after comparing the grammars of the three RFCs:
> > 1) According to the above RFC4282 grammar, "2.a " is a valid realm.
>=20
> Correct.
>=20
> >
> > 2) According to the above RFC4566 grammar, "2.a " is not a=20
> valid FQDN=20
> > since it has only 3 characters (not 4 or more).
>=20
> First, RFC4566 ABNF is not in a role for defining FQDN.. it=20
> is an ABNF for SDP grammar. So if the SDP grammar ABNF is=20
> wrong, it is not the problem of original FQDN ABNF. Besides,=20
> using "2.a" as an example is misleading. There is no root=20
> zones that are one character long (see ICP-1, RFC1591). The=20
> shortest root zone is two characters, which would e.g. be=20
> "2.ac" and this is correct according to the ABNF in RFC4566. =20
> The RFC1035 BNF would allow one character root zones,=20
> however, those just do not exist in Internet DNS.
>=20
> >
> > 3) According to the above RFC1035 grammar, "2.a" is not a=20
> valid domain=20
> > since it doesn't start with a letter (but a digit).
>=20
> RFC1101 updates RFC1035 and relaxes the issue with a digit=20
> being the first character.
>=20
>=20
> > If one could prove that the grammar of realm is the same as the=20
> > grammar of FQDN,  then, RFC4282, RFC1035 and RFC4566 would=20
> be proven=20
> > inconsistent according.
>=20
> So far, no problems with cases 2) and 3). Regarding the case=20
> 1) few notes. RFC3588bis section 1.3. states that "NAI realm=20
> names are required to be unique, and are piggybacked on the=20
> administration of the DNS namespace." This basically means=20
> one loses its rights for "creative" realm names when used=20
> with Diameter. In DNS, one character root zones do not exist,=20
> thus "2.a" is not legal within Diameter scope.
>=20
> > However, I am not sure if I have found the right place where the=20
> > strict grammar of FQDN is defined. Please tell me if you know.
> > But RFC4566 and RFC1035 were the materials my comment in=20
> the previous=20
> > email was based on.
>=20
> Although this stuff is spread a bit around and topped with=20
> de-facto assumptions, I think there is no issue.
>=20
> Cheers,
> 	Jouni
>=20
>=20
>=20
>=20
> >
> >
> >
> > Best Regards,
> > Fortune
> >
> > -----Original Message-----
> > From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
> > Sent: Thursday, March 05, 2009 6:02 AM
> > To: lionel.morand@orange-ftgroup.com
> > Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
> > Subject: Re: [Dime] Problem with Origin- &=20
> Destination-Realm AVPs in=20
> > RFC3588bis
> >
> > Hi Fortune,
> >> I'm not sure to understand but I might have missed something.
> >>> From a syntax point of view, what is the difference=20
> between a FQDN=20
> >>> and a
> > realm?
> >> What would be the "potential" impacts to say that the=20
> >> DiameterIdentity can
> > be a FQDN or a realm?
> >>
> > I have the same question as Lionel. Syntactically, FQDN and=20
> realm are=20
> > the same from the parsers point of view. The difference is in=20
> > semantics which is already specified by the AVP having that type.
> >
> > regards,
> > victor
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
>=20
>=20

From vfajardo@tari.toshiba.com  Thu Mar  5 06:31:13 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 977E628C221 for <dime@core3.amsl.com>; Thu,  5 Mar 2009 06:31:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.201
X-Spam-Level: 
X-Spam-Status: No, score=-3.201 tagged_above=-999 required=5 tests=[AWL=1.398,  BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LfHRaodUrUL0 for <dime@core3.amsl.com>; Thu,  5 Mar 2009 06:31:12 -0800 (PST)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id 14DBC28C185 for <dime@ietf.org>; Thu,  5 Mar 2009 06:31:11 -0800 (PST)
Received: from [127.0.0.1] (home.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n25EQUVX090247; Thu, 5 Mar 2009 09:26:30 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49AFE23A.9060305@tari.toshiba.com>
Date: Thu, 05 Mar 2009 09:31:22 -0500
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: Fortune HUANG <fqhuang@huawei.com>
References: <00ad01c99d9a$2b708a90$9001a8c0@xxxx87e842e29b>
In-Reply-To: <00ad01c99d9a$2b708a90$9001a8c0@xxxx87e842e29b>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 14:31:13 -0000

Hi Fortune/Jouni/Lionel/Glenn,

So, ca we proceed with Lionel's proposal ? Any other issues with it ?

regards,
victor

> Hi Jouni,
>
> Thank you very much for your correction and telling me the right place for
> FQDN. 
>
> Best Regards,
> Fortune
>
> -----Original Message-----
> From: jouni korhonen [mailto:jouni.nospam@gmail.com] 
> Sent: Thursday, March 05, 2009 5:43 PM
> To: Fortune HUANG
> Cc: 'Victor Fajardo'; lionel.morand@orange-ftgroup.com; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
> RFC3588bis
>
>
> Hi Fortune,
>
>
> On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:
>
> [snip]
>
>
>   
>> My conclusion after comparing the grammars of the three RFCs:
>> 1) According to the above RFC4282 grammar, "2.a " is a valid realm.
>>     
>
> Correct.
>
>   
>> 2) According to the above RFC4566 grammar, "2.a " is not a valid  
>> FQDN since
>> it has only 3 characters (not 4 or more).
>>     
>
> First, RFC4566 ABNF is not in a role for defining FQDN.. it is an ABNF  
> for SDP grammar. So if the SDP grammar ABNF is wrong, it is not the  
> problem of original FQDN ABNF. Besides, using "2.a" as an example is  
> misleading. There is no root zones that are one character long (see  
> ICP-1, RFC1591). The shortest root zone is two characters, which would  
> e.g. be "2.ac" and this is correct according to the ABNF in RFC4566.  
> The RFC1035 BNF would allow one character root zones, however, those  
> just do not exist in Internet DNS.
>
>   
>> 3) According to the above RFC1035 grammar, "2.a" is not a valid  
>> domain since
>> it doesn't start with a letter (but a digit).
>>     
>
>   updates RFC1035 and relaxes the issue with a digit being the  
> first character.
>
>
>   
>> If one could prove that the grammar of realm is the same as the  
>> grammar of
>> FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven inconsistent
>> according.
>>     
>
> So far, no problems with cases 2) and 3). Regarding the case 1) few  
> notes. RFC3588bis section 1.3. states that "NAI realm names are  
> required to be unique, and are piggybacked on the administration of  
> the DNS namespace." This basically means one loses its rights for  
> "creative" realm names when used with Diameter. In DNS, one character  
> root zones do not exist, thus "2.a" is not legal within Diameter scope.
>
>   
>> However, I am not sure if I have found the right place where the  
>> strict
>> grammar of FQDN is defined. Please tell me if you know.
>> But RFC4566 and RFC1035 were the materials my comment in the  
>> previous email
>> was based on.
>>     
>
> Although this stuff is spread a bit around and topped with de-facto  
> assumptions, I think there is no issue.
>
> Cheers,
> 	Jouni
>
>
>
>
>   
>>
>> Best Regards,
>> Fortune
>>
>> -----Original Message-----
>> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
>> Sent: Thursday, March 05, 2009 6:02 AM
>> To: lionel.morand@orange-ftgroup.com
>> Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
>> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
>> RFC3588bis
>>
>> Hi Fortune,
>>     
>>> I'm not sure to understand but I might have missed something.
>>>       
>>>> From a syntax point of view, what is the difference between a FQDN  
>>>> and a
>>>>         
>> realm?
>>     
>>> What would be the "potential" impacts to say that the  
>>> DiameterIdentity can
>>>       
>> be a FQDN or a realm?
>>     
>> I have the same question as Lionel. Syntactically, FQDN and realm  
>> are the
>> same from the parsers point of view. The difference is in semantics  
>> which is
>> already specified by the AVP having that type.
>>
>> regards,
>> victor
>>
>> _______________________________________________
>> DiME mailing list
>> DiME@ietf.org
>> https://www.ietf.org/mailman/listinfo/dime
>>     
>
>
>
>
>
>   


From vfajardo@tari.toshiba.com  Thu Mar  5 08:08:12 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C52C83A68D4 for <dime@core3.amsl.com>; Thu,  5 Mar 2009 08:08:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.481
X-Spam-Level: 
X-Spam-Status: No, score=-3.481 tagged_above=-999 required=5 tests=[AWL=1.118,  BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lGn3KJIKFWKI for <dime@core3.amsl.com>; Thu,  5 Mar 2009 08:08:11 -0800 (PST)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id 194123A6889 for <dime@ietf.org>; Thu,  5 Mar 2009 08:08:08 -0800 (PST)
Received: from [127.0.0.1] (smtp.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n25G3XXe091203; Thu, 5 Mar 2009 11:03:33 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49AFF8E2.2050404@tari.toshiba.com>
Date: Thu, 05 Mar 2009 11:08:02 -0500
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: Fortune HUANG <fqhuang@huawei.com>
References: <000301c99da1$d03ddb20$9001a8c0@xxxx87e842e29b>
In-Reply-To: <000301c99da1$d03ddb20$9001a8c0@xxxx87e842e29b>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 16:08:12 -0000

Hi Fortune,
> Hi Victor,
>
> I am fine with the proposal. Just to make sure one thing, do we need to
> specify it is a realm or a FQDN when defining a AVP of type DiameterIdentiy?
>   
I would think so.
regards,
victor


> Best Regards,
> Fortune
>
>
> -----Original Message-----
> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com] 
> Sent: Thursday, March 05, 2009 10:31 PM
> To: Fortune HUANG
> Cc: 'jouni korhonen'; lionel.morand@orange-ftgroup.com; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
> RFC3588bis
>
> Hi Fortune/Jouni/Lionel/Glenn,
>
> So, ca we proceed with Lionel's proposal ? Any other issues with it ?
>
> regards,
> victor
>
>   
>> Hi Jouni,
>>
>> Thank you very much for your correction and telling me the right place for
>> FQDN. 
>>
>> Best Regards,
>> Fortune
>>
>> -----Original Message-----
>> From: jouni korhonen [mailto:jouni.nospam@gmail.com] 
>> Sent: Thursday, March 05, 2009 5:43 PM
>> To: Fortune HUANG
>> Cc: 'Victor Fajardo'; lionel.morand@orange-ftgroup.com; dime@ietf.org
>> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
>> RFC3588bis
>>
>>
>> Hi Fortune,
>>
>>
>> On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:
>>
>> [snip]
>>
>>
>>   
>>     
>>> My conclusion after comparing the grammars of the three RFCs:
>>> 1) According to the above RFC4282 grammar, "2.a " is a valid realm.
>>>     
>>>       
>> Correct.
>>
>>   
>>     
>>> 2) According to the above RFC4566 grammar, "2.a " is not a valid  
>>> FQDN since
>>> it has only 3 characters (not 4 or more).
>>>     
>>>       
>> First, RFC4566 ABNF is not in a role for defining FQDN.. it is an ABNF  
>> for SDP grammar. So if the SDP grammar ABNF is wrong, it is not the  
>> problem of original FQDN ABNF. Besides, using "2.a" as an example is  
>> misleading. There is no root zones that are one character long (see  
>> ICP-1, RFC1591). The shortest root zone is two characters, which would  
>> e.g. be "2.ac" and this is correct according to the ABNF in RFC4566.  
>> The RFC1035 BNF would allow one character root zones, however, those  
>> just do not exist in Internet DNS.
>>
>>   
>>     
>>> 3) According to the above RFC1035 grammar, "2.a" is not a valid  
>>> domain since
>>> it doesn't start with a letter (but a digit).
>>>     
>>>       
>>   updates RFC1035 and relaxes the issue with a digit being the  
>> first character.
>>
>>
>>   
>>     
>>> If one could prove that the grammar of realm is the same as the  
>>> grammar of
>>> FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven inconsistent
>>> according.
>>>     
>>>       
>> So far, no problems with cases 2) and 3). Regarding the case 1) few  
>> notes. RFC3588bis section 1.3. states that "NAI realm names are  
>> required to be unique, and are piggybacked on the administration of  
>> the DNS namespace." This basically means one loses its rights for  
>> "creative" realm names when used with Diameter. In DNS, one character  
>> root zones do not exist, thus "2.a" is not legal within Diameter scope.
>>
>>   
>>     
>>> However, I am not sure if I have found the right place where the  
>>> strict
>>> grammar of FQDN is defined. Please tell me if you know.
>>> But RFC4566 and RFC1035 were the materials my comment in the  
>>> previous email
>>> was based on.
>>>     
>>>       
>> Although this stuff is spread a bit around and topped with de-facto  
>> assumptions, I think there is no issue.
>>
>> Cheers,
>> 	Jouni
>>
>>
>>
>>
>>   
>>     
>>> Best Regards,
>>> Fortune
>>>
>>> -----Original Message-----
>>> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
>>> Sent: Thursday, March 05, 2009 6:02 AM
>>> To: lionel.morand@orange-ftgroup.com
>>> Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
>>> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
>>> RFC3588bis
>>>
>>> Hi Fortune,
>>>     
>>>       
>>>> I'm not sure to understand but I might have missed something.
>>>>       
>>>>         
>>>>> From a syntax point of view, what is the difference between a FQDN  
>>>>> and a
>>>>>         
>>>>>           
>>> realm?
>>>     
>>>       
>>>> What would be the "potential" impacts to say that the  
>>>> DiameterIdentity can
>>>>       
>>>>         
>>> be a FQDN or a realm?
>>>     
>>> I have the same question as Lionel. Syntactically, FQDN and realm  
>>> are the
>>> same from the parsers point of view. The difference is in semantics  
>>> which is
>>> already specified by the AVP having that type.
>>>
>>> regards,
>>> victor
>>>
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>>>     
>>>       
>>
>>
>>
>>   
>>     
>
>
>
>
>
>   


From glenzorn@comcast.net  Thu Mar  5 14:18:15 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0D8FD3A694E for <dime@core3.amsl.com>; Thu,  5 Mar 2009 14:18:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.206
X-Spam-Level: 
X-Spam-Status: No, score=-1.206 tagged_above=-999 required=5 tests=[AWL=-1.021, BAYES_40=-0.185]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lnx2Ix0Su+Ur for <dime@core3.amsl.com>; Thu,  5 Mar 2009 14:18:14 -0800 (PST)
Received: from QMTA09.emeryville.ca.mail.comcast.net (qmta09.emeryville.ca.mail.comcast.net [76.96.30.96]) by core3.amsl.com (Postfix) with ESMTP id 3FECF3A6902 for <dime@ietf.org>; Thu,  5 Mar 2009 14:18:13 -0800 (PST)
Received: from OMTA03.emeryville.ca.mail.comcast.net ([76.96.30.27]) by QMTA09.emeryville.ca.mail.comcast.net with comcast id PQMJ1b0060b6N64A9aJkSv; Thu, 05 Mar 2009 22:18:44 +0000
Received: from gwzPC ([24.18.239.198]) by OMTA03.emeryville.ca.mail.comcast.net with comcast id PaJj1b00K4HXf1k8PaJkw4; Thu, 05 Mar 2009 22:18:44 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: <dime@ietf.org>
Date: Thu, 5 Mar 2009 14:18:21 -0800
Message-ID: <009901c99de0$4be9d2e0$e3bd78a0$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acmd4Er+SpGiDnCvSc+o+tHnIrhoqA==
Content-Language: en-us
Subject: [Dime] Updated MIBs
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Mar 2009 22:18:15 -0000

I've updated the Base & Credit Control MIB drafts:
http://www.ietf.org/internet-drafts/draft-zorn-dime-diameter-base-protocol-m
ib-04.txt
http://www.ietf.org/internet-drafts/draft-zorn-dime-diameter-cc-appl-mib-04.
txt
I expect that this will be the last time I'll do so unless some interest is
shown in them by the WG & Chairs.

~gwz

Play assigns meaning to human activity--work erases it.
  -- P.L. Wilson



From fqhuang@huawei.com  Thu Mar  5 16:35:14 2009
Return-Path: <fqhuang@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 975F828C0FC for <dime@core3.amsl.com>; Thu,  5 Mar 2009 16:35:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.53
X-Spam-Level: 
X-Spam-Status: No, score=-1.53 tagged_above=-999 required=5 tests=[AWL=3.069,  BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7KosuhwrnJNZ for <dime@core3.amsl.com>; Thu,  5 Mar 2009 16:35:13 -0800 (PST)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 1406F3A692E for <dime@ietf.org>; Thu,  5 Mar 2009 16:35:13 -0800 (PST)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KG2008806ZGOM@szxga04-in.huawei.com> for dime@ietf.org; Fri, 06 Mar 2009 08:35:40 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KG2001ZD6ZGDB@szxga04-in.huawei.com> for dime@ietf.org; Fri, 06 Mar 2009 08:35:40 +0800 (CST)
Received: from h36145c ([10.70.39.123]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KG200FLB6ZF5R@szxml05-in.huawei.com> for dime@ietf.org; Fri, 06 Mar 2009 08:35:40 +0800 (CST)
Date: Fri, 06 Mar 2009 08:35:40 +0800
From: Fortune HUANG <fqhuang@huawei.com>
In-reply-to: <49AFF8E2.2050404@tari.toshiba.com>
To: 'Victor Fajardo' <vfajardo@tari.toshiba.com>
Message-id: <007f01c99df3$79ba8350$7b27460a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Thread-index: AcmdrKl57g2W/bjVSN+2ArnzOKK0XAARpLMg
Cc: dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs	in	RFC3588bis
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Mar 2009 00:35:14 -0000

Hi Victor, 

Then it would be perfect for me.

Best Regards,
Fortune

-----Original Message-----
From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com] 
Sent: Friday, March 06, 2009 12:08 AM
To: Fortune HUANG
Cc: 'jouni korhonen'; lionel.morand@orange-ftgroup.com; dime@ietf.org
Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in
RFC3588bis

Hi Fortune,
> Hi Victor,
>
> I am fine with the proposal. Just to make sure one thing, do we need 
> to specify it is a realm or a FQDN when defining a AVP of type
DiameterIdentiy?
>   
I would think so.
regards,
victor


> Best Regards,
> Fortune
>
>
> -----Original Message-----
> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
> Sent: Thursday, March 05, 2009 10:31 PM
> To: Fortune HUANG
> Cc: 'jouni korhonen'; lionel.morand@orange-ftgroup.com; dime@ietf.org
> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in 
> RFC3588bis
>
> Hi Fortune/Jouni/Lionel/Glenn,
>
> So, ca we proceed with Lionel's proposal ? Any other issues with it ?
>
> regards,
> victor
>
>   
>> Hi Jouni,
>>
>> Thank you very much for your correction and telling me the right 
>> place for FQDN.
>>
>> Best Regards,
>> Fortune
>>
>> -----Original Message-----
>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
>> Sent: Thursday, March 05, 2009 5:43 PM
>> To: Fortune HUANG
>> Cc: 'Victor Fajardo'; lionel.morand@orange-ftgroup.com; dime@ietf.org
>> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in 
>> RFC3588bis
>>
>>
>> Hi Fortune,
>>
>>
>> On Mar 5, 2009, at 4:46 AM, Fortune HUANG wrote:
>>
>> [snip]
>>
>>
>>   
>>     
>>> My conclusion after comparing the grammars of the three RFCs:
>>> 1) According to the above RFC4282 grammar, "2.a " is a valid realm.
>>>     
>>>       
>> Correct.
>>
>>   
>>     
>>> 2) According to the above RFC4566 grammar, "2.a " is not a valid 
>>> FQDN since it has only 3 characters (not 4 or more).
>>>     
>>>       
>> First, RFC4566 ABNF is not in a role for defining FQDN.. it is an 
>> ABNF for SDP grammar. So if the SDP grammar ABNF is wrong, it is not 
>> the problem of original FQDN ABNF. Besides, using "2.a" as an example 
>> is misleading. There is no root zones that are one character long 
>> (see ICP-1, RFC1591). The shortest root zone is two characters, which 
>> would e.g. be "2.ac" and this is correct according to the ABNF in
RFC4566.
>> The RFC1035 BNF would allow one character root zones, however, those 
>> just do not exist in Internet DNS.
>>
>>   
>>     
>>> 3) According to the above RFC1035 grammar, "2.a" is not a valid 
>>> domain since it doesn't start with a letter (but a digit).
>>>     
>>>       
>>   updates RFC1035 and relaxes the issue with a digit being the first 
>> character.
>>
>>
>>   
>>     
>>> If one could prove that the grammar of realm is the same as the 
>>> grammar of FQDN,  then, RFC4282, RFC1035 and RFC4566 would be proven 
>>> inconsistent according.
>>>     
>>>       
>> So far, no problems with cases 2) and 3). Regarding the case 1) few 
>> notes. RFC3588bis section 1.3. states that "NAI realm names are 
>> required to be unique, and are piggybacked on the administration of 
>> the DNS namespace." This basically means one loses its rights for 
>> "creative" realm names when used with Diameter. In DNS, one character 
>> root zones do not exist, thus "2.a" is not legal within Diameter scope.
>>
>>   
>>     
>>> However, I am not sure if I have found the right place where the 
>>> strict grammar of FQDN is defined. Please tell me if you know.
>>> But RFC4566 and RFC1035 were the materials my comment in the 
>>> previous email was based on.
>>>     
>>>       
>> Although this stuff is spread a bit around and topped with de-facto 
>> assumptions, I think there is no issue.
>>
>> Cheers,
>> 	Jouni
>>
>>
>>
>>
>>   
>>     
>>> Best Regards,
>>> Fortune
>>>
>>> -----Original Message-----
>>> From: Victor Fajardo [mailto:vfajardo@tari.toshiba.com]
>>> Sent: Thursday, March 05, 2009 6:02 AM
>>> To: lionel.morand@orange-ftgroup.com
>>> Cc: fqhuang@huawei.com; glenzorn@comcast.net; dime@ietf.org
>>> Subject: Re: [Dime] Problem with Origin- & Destination-Realm AVPs in 
>>> RFC3588bis
>>>
>>> Hi Fortune,
>>>     
>>>       
>>>> I'm not sure to understand but I might have missed something.
>>>>       
>>>>         
>>>>> From a syntax point of view, what is the difference between a FQDN 
>>>>> and a
>>>>>         
>>>>>           
>>> realm?
>>>     
>>>       
>>>> What would be the "potential" impacts to say that the 
>>>> DiameterIdentity can
>>>>       
>>>>         
>>> be a FQDN or a realm?
>>>     
>>> I have the same question as Lionel. Syntactically, FQDN and realm 
>>> are the same from the parsers point of view. The difference is in 
>>> semantics which is already specified by the AVP having that type.
>>>
>>> regards,
>>> victor
>>>
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>>>     
>>>       
>>
>>
>>
>>   
>>     
>
>
>
>
>
>   


From root@core3.amsl.com  Fri Mar  6 09:00:01 2009
Return-Path: <root@core3.amsl.com>
X-Original-To: dime@ietf.org
Delivered-To: dime@core3.amsl.com
Received: by core3.amsl.com (Postfix, from userid 0) id 3AAE73A6A0A; Fri,  6 Mar 2009 09:00:01 -0800 (PST)
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Content-Type: Multipart/Mixed; Boundary="NextPart"
Mime-Version: 1.0
Message-Id: <20090306170001.3AAE73A6A0A@core3.amsl.com>
Date: Fri,  6 Mar 2009 09:00:01 -0800 (PST)
Cc: dime@ietf.org
Subject: [Dime] I-D Action:draft-ietf-dime-pmip6-01.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Mar 2009 17:00:01 -0000

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Diameter Maintenance and Extensions Working Group of the IETF.


	Title           : Diameter Proxy Mobile IPv6: Mobile Access Gateway and Local Mobility Anchor Interaction with Diameter Server
	Author(s)       : J. Korhonen, et al.
	Filename        : draft-ietf-dime-pmip6-01.txt
	Pages           : 18
	Date            : 2009-03-06

This specification defines the Diameter support for the Proxy Mobile
IPv6 and the corresponding mobility service session setup.  The
policy information needed by the Proxy Mobile IPv6 is defined in
mobile node's policy profile, which could be downloaded from the
Diameter server to the Mobile Access Gateway once the mobile node
attaches to a Proxy Mobile IPv6 Domain and performs access
authentication.  During the binding update exchange between the
Mobile Access Gateway and the Local Mobility Anchor, the Local
Mobility Anchor can interact with the Diameter server in order to
update the remote policy store with the mobility session related
information.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-dime-pmip6-01.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-dime-pmip6-01.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2009-03-06084855.I-D@ietf.org>


--NextPart--

From root@core3.amsl.com  Fri Mar  6 14:30:02 2009
Return-Path: <root@core3.amsl.com>
X-Original-To: dime@ietf.org
Delivered-To: dime@core3.amsl.com
Received: by core3.amsl.com (Postfix, from userid 0) id 2BAAA28C0EB; Fri,  6 Mar 2009 14:30:02 -0800 (PST)
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Content-Type: Multipart/Mixed; Boundary="NextPart"
Mime-Version: 1.0
Message-Id: <20090306223002.2BAAA28C0EB@core3.amsl.com>
Date: Fri,  6 Mar 2009 14:30:02 -0800 (PST)
Cc: dime@ietf.org
Subject: [Dime] I-D Action:draft-ietf-dime-rfc3588bis-16.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Mar 2009 22:30:02 -0000

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Diameter Maintenance and Extensions Working Group of the IETF.


	Title           : Diameter Base Protocol (Version 2)
	Author(s)       : V. Fajardo, et al.
	Filename        : draft-ietf-dime-rfc3588bis-16.txt
	Pages           : 159
	Date            : 2009-03-06

The Diameter base protocol is intended to provide an Authentication,
Authorization and Accounting (AAA) framework for applications such as
network access or IP mobility in both local and roaming situations.
This document specifies the message format, transport, error
reporting, accounting and security services used by all Diameter
applications.  The Diameter base protocol as defined in this document
must be supported by all Diameter implementations.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-dime-rfc3588bis-16.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-dime-rfc3588bis-16.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2009-03-06142549.I-D@ietf.org>


--NextPart--

From Hannes.Tschofenig@gmx.net  Sat Mar  7 03:34:44 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CD843A6885 for <dime@core3.amsl.com>; Sat,  7 Mar 2009 03:34:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.345
X-Spam-Level: 
X-Spam-Status: No, score=-2.345 tagged_above=-999 required=5 tests=[AWL=0.254,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B5PKsuo2IbkJ for <dime@core3.amsl.com>; Sat,  7 Mar 2009 03:34:43 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 3BFB23A699D for <dime@ietf.org>; Sat,  7 Mar 2009 03:34:42 -0800 (PST)
Received: (qmail invoked by alias); 07 Mar 2009 11:35:13 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp015) with SMTP; 07 Mar 2009 12:35:13 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19RUqdlRCVRIrrXCBZnx+6P1sSS4JAA4+c/uJNph1 8F4fRgdOBiPj2h
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>
Date: Sat, 7 Mar 2009 13:36:17 +0200
Message-ID: <021601c99f18$ee622250$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcmcsHizGa06V29eRmCTub5khVECOQCZiQ9g
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
In-Reply-To: <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.5
Cc: dime@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Mar 2009 11:34:44 -0000

I also have to add ...=20

If you define a new Diameter Application ID then you have to decide =
which
application to use as a baseline. If you look at Section 5.1 of
http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.txt =
then
you see that the Mobile IPv6 specific AVPs are optional in the Command =
Code
ABNF. Hence, building on EAP is probably not such a bad idea.=20

There is also the question how much you want to say about Mobile IPv6
bootstrapping in the ERP document.

Ciao
Hannes

>-----Original Message-----
>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]=20
>Sent: 04 March, 2009 12:03
>To: Hannes Tschofenig
>Cc: dime@ietf.org
>Subject: Re: [Dime] DiME ERP: new Application ID or not ?=20
>(non-roaming case)
>
>hi hannes,
>
> see inline,
>
>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig=20
><Hannes.Tschofenig@gmx.net> wrote:
>> Hi Julien,
>>
>> When we discussed this at the phone conference call (and the=20
>> discussion is also captured in the meeting minutes) then I thought=20
>> that the conclusion was to define a new Diameter application=20
>for this exchange:
>>
>>
>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0Server
>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0=3D=3D=3D=3D=3D=3D
>>
>> =A0 =A0[<-- EAP-Initiate/ -----
>> =A0 =A0 =A0 =A0Re-auth-Start]
>> =A0 =A0[<-- EAP-Request/ ------
>> =A0 =A0 =A0 =A0Identity]
>>
>>
>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0Re-auth/
>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>>
>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
Re-auth/
>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
>>
>> =A0 Note: [] brackets indicate optionality.
>>
>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP =
Exchange
>>
>> (The server in the figure above is the HOKEY server, a dedicated=20
>> entity.)
>>
>>
>> The initial EAP authentication is left untouched and, as Glen=20
>> explained us, there is the assumption that the AAA entities work=20
>> together with the HOKEY servers in a non-standardized way.=20
>To me that sounded like a good plan.
>>
>> Does this make any sense?
>
> Taking into accounts that we have one app-id for Diameter EAP=20
>(I would say NASREQ-EAP) AND soon another app-id for Diameter=20
>MIP6 (which also use EAP for authentication). It certainly=20
>make sense to not reuse the same App-ID for ERP if we want to=20
>use ERP for the mip6 case.
>
> Let's see if others have opinion.
>
> Regards,
>
> Julien
>
>>
>>
>> The non-HOKEY expert
>> Hannes
>>
>> PS: I never said that this is specific document is going to=20
>be trivial=20
>> :-)
>>
>>>-----Original Message-----
>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf=20
>>>Of Julien Bournelle
>>>Sent: 04 March, 2009 09:05
>>>To: dime@ietf.org
>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>>(non-roaming case)
>>>
>>>Hi all,
>>>
>>> we try to solve the issue concerning the need for a new=20
>App-Id or not.
>>>
>>> The ERP protocol (RFC 5296) is to be used along with EAP. It=20
>>>basically defines two new EAP codes and uses keying material derived=20
>>>from a first EAP authentication.
>>>
>>> To start the discussion, let's take the non-roaming case.
>>>
>>> In non-roaming, we have first an EAP authentication using Diameter=20
>>>EAP.
>>> Then, for reauthentication using ERP, we have two messages
>>>(Request/Response) =A0between NAS and the AAA/ERP server carrying EAP =

>>>packets
>>>
>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>>
>>> So, either we reuse the Diameter EAP Application (DER/DEA) or we=20
>>>define a new Diameter Application.
>>>
>>> If we use a new Diameter Application, a new Diameter=20
>session will be=20
>>>created and eventually a new Diameter server will be reached. What=20
>>>bothers me in this case is that we basically perform a=20
>>>reauthentication for the same session which is primarly=20
>handled at the=20
>>>AAA/EAP server. So, i'm wondering what happens concerning=20
>>>Authorization Lifetime session etc..
>>>
>>> Note that I still don't have strong opinion and I'll be=20
>glad to hear=20
>>>opinions from others.
>>>
>>> Regards,
>>>
>>> Julien
>>>_______________________________________________
>>>DiME mailing list
>>>DiME@ietf.org
>>>https://www.ietf.org/mailman/listinfo/dime
>>>
>>
>>
>


From mdolly@att.com  Sun Mar  8 04:02:14 2009
Return-Path: <mdolly@att.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 355A53A6B2B for <dime@core3.amsl.com>; Sun,  8 Mar 2009 04:02:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.567
X-Spam-Level: 
X-Spam-Status: No, score=-106.567 tagged_above=-999 required=5 tests=[AWL=0.031, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 027MJukMBaj0 for <dime@core3.amsl.com>; Sun,  8 Mar 2009 04:02:13 -0700 (PDT)
Received: from mail146.messagelabs.com (mail146.messagelabs.com [216.82.241.147]) by core3.amsl.com (Postfix) with ESMTP id 1D12B3A6A6C for <dime@ietf.org>; Sun,  8 Mar 2009 04:02:13 -0700 (PDT)
X-VirusChecked: Checked
X-Env-Sender: mdolly@att.com
X-Msg-Ref: server-2.tower-146.messagelabs.com!1236510165!10499960!1
X-StarScan-Version: 6.0.0; banners=-,-,-
X-Originating-IP: [144.160.20.54]
Received: (qmail 21105 invoked from network); 8 Mar 2009 11:02:46 -0000
Received: from sbcsmtp7.sbc.com (HELO mlpi135.enaf.sfdc.sbc.com) (144.160.20.54) by server-2.tower-146.messagelabs.com with AES256-SHA encrypted SMTP; 8 Mar 2009 11:02:46 -0000
Received: from enaf.sfdc.sbc.com (localhost.localdomain [127.0.0.1]) by mlpi135.enaf.sfdc.sbc.com (8.14.3/8.14.3) with ESMTP id n28B2hBp023499 for <dime@ietf.org>; Sun, 8 Mar 2009 07:02:44 -0400
Received: from gaalpa1msgusr7e.ugd.att.com (gaalpa1msgusr7e.ugd.att.com [135.53.26.19]) by mlpi135.enaf.sfdc.sbc.com (8.14.3/8.14.3) with ESMTP id n28B2fCg023478 for <dime@ietf.org>; Sun, 8 Mar 2009 07:02:41 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C99FDD.6612B895"
Date: Sun, 8 Mar 2009 07:02:38 -0400
Message-ID: <14C85D6CCBE92743AF33663BF5D24EBA0288CAC3@gaalpa1msgusr7e.ugd.att.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Question on draft-ietf-dime-qos-parameters
Thread-index: AcmTIQ3hjxM972AdTBqzxZWmkJbBlALgnTAQAE5BmSA=
From: "DOLLY, MARTIN C, ATTLABS" <mdolly@att.com>
To: <dime@ietf.org>
Subject: [Dime] Question on draft-ietf-dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Mar 2009 11:02:14 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99FDD.6612B895
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello,

=20

Questions on draft-ietf-dime-qos-parameters from the Dime Virtual
meeting of Feb 19th:

=20

*       Is the ALRP AVP appropriate for call/session level or is it
bearer related?

*       If call/session level, draft-ietf-dime-qos-parameters-09.txt
makes reference to ietf-tsvwg-emergency-rsvp, which is bearer related.
Is it also bearer related?

*       How can a user priority level be carried in this AVP at the
call/session level?

*       draft-ietf-dime-qos-parameters-09.txt is for QoS and there is
difference between QoS (bearer related) and signaling priority for a
call/session (e.g, priority call/session).  Correct?

*       In draft-ietf-dime-qos-parameters-09.txt, all AVPs (except may
be the ALRP AVP) are bearer/QoS associated.

=20

Thanks,

=20

Martin

=20

=20

=20


------_=_NextPart_001_01C99FDD.6612B895
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal;
	font-family:"Arial","sans-serif";
	color:windowtext;}
span.EmailStyle18
	{mso-style-type:personal;
	font-family:"Arial","sans-serif";
	color:navy;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
 /* List Definitions */
 @list l0
	{mso-list-id:207373624;
	mso-list-type:hybrid;
	mso-list-template-ids:1764425370 -1751484612 67698691 67698693 67698689 =
67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:.4in;
	mso-level-number-position:left;
	margin-left:.4in;
	text-indent:-.2in;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l0:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1
	{mso-list-id:2113623566;
	mso-list-type:hybrid;
	mso-list-template-ids:1049274250 -1751484612 67698691 67698693 67698689 =
67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:.4in;
	mso-level-number-position:left;
	margin-left:.4in;
	text-indent:-.2in;
	font-family:Symbol;}
@list l1:level2
	{mso-level-tab-stop:1.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level3
	{mso-level-tab-stop:1.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level4
	{mso-level-tab-stop:2.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level5
	{mso-level-tab-stop:2.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level6
	{mso-level-tab-stop:3.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level7
	{mso-level-tab-stop:3.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level8
	{mso-level-tab-stop:4.0in;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1:level9
	{mso-level-tab-stop:4.5in;
	mso-level-number-position:left;
	text-indent:-.25in;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal style=3D'margin-left:.5in'><b><span =
style=3D'font-size:10.0pt;
font-family:"Tahoma","sans-serif";color:#1F497D'>Hello,<o:p></o:p></span>=
</b></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif";color:#1F497D'>Questions on
draft-ietf-dime-qos-parameters from </span><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif"'>the Dime Virtual meeting of Feb =
19<sup>th</sup>:<o:p></o:p></span></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:.4in;text-indent:-.2in;mso-list:l1 level1 =
lfo3'><![if !supportLists]><span
style=3D'font-size:10.0pt;font-family:Symbol;color:navy'><span =
style=3D'mso-list:
Ignore'>&middot;<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Is the ALRP AVP appropriate for call/session level or is it =
bearer
related?<o:p></o:p></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:.4in;text-indent:-.2in;mso-list:l1 level1 =
lfo3'><![if !supportLists]><span
style=3D'font-size:10.0pt;font-family:Symbol;color:navy'><span =
style=3D'mso-list:
Ignore'>&middot;<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>If call/session level, draft-ietf-dime-qos-parameters-09.txt =
makes
reference to ietf-tsvwg-emergency-rsvp, which is bearer related. Is it =
also
bearer related?<o:p></o:p></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:.4in;text-indent:-.2in;mso-list:l1 level1 =
lfo3'><![if !supportLists]><span
style=3D'font-size:10.0pt;font-family:Symbol;color:navy'><span =
style=3D'mso-list:
Ignore'>&middot;<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>How can a user priority level be carried in this AVP at the
call/session level?<o:p></o:p></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:.4in;text-indent:-.2in;mso-list:l1 level1 =
lfo3'><![if !supportLists]><span
style=3D'font-size:10.0pt;font-family:Symbol;color:navy'><span =
style=3D'mso-list:
Ignore'>&middot;<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>draft-ietf-dime-qos-parameters-09.txt is for QoS and there =
is
difference between QoS (bearer related) and signaling priority for a
call/session (e.g, priority call/session).&nbsp; =
Correct?<o:p></o:p></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:.4in;text-indent:-.2in;mso-list:l1 level1 =
lfo3'><![if !supportLists]><span
style=3D'font-size:10.0pt;font-family:Symbol;color:navy'><span =
style=3D'mso-list:
Ignore'>&middot;<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>In draft-ietf-dime-qos-parameters-09.txt, all AVPs (except =
may be
the ALRP AVP) are bearer/QoS associated.<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Thanks,<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";
color:navy'>Martin<o:p></o:p></span></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal style=3D'margin-left:.5in'><span =
style=3D'font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p>&nbsp;</o:p></span></p>

</div>

</body>

</html>

------_=_NextPart_001_01C99FDD.6612B895--

From hannes.tschofenig@nsn.com  Sun Mar  8 23:13:54 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A4C13A67D8 for <dime@core3.amsl.com>; Sun,  8 Mar 2009 23:13:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.589
X-Spam-Level: 
X-Spam-Status: No, score=-3.589 tagged_above=-999 required=5 tests=[AWL=-0.990, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lOCUI6l-k4Rz for <dime@core3.amsl.com>; Sun,  8 Mar 2009 23:13:53 -0700 (PDT)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 0E9463A67B6 for <dime@ietf.org>; Sun,  8 Mar 2009 23:13:52 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n296ENor005077 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Mon, 9 Mar 2009 07:14:23 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n296EMbK000346 for <dime@ietf.org>; Mon, 9 Mar 2009 07:14:23 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Mon, 9 Mar 2009 07:14:22 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 9 Mar 2009 08:15:26 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B4501204970@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: WGLC: draft-ietf-dime-pmip6-01.txt
Thread-Index: AcmgfnBpV4rkIZV1TxieaYo4mqcFPQ==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 09 Mar 2009 06:14:22.0561 (UTC) FILETIME=[4A0F4D10:01C9A07E]
Subject: [Dime] WGLC: draft-ietf-dime-pmip6-01.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2009 06:13:54 -0000

Hi all,=20

The authors have informed us that the recently updated draft version is
ready for WGLC.=20

This is a DIME Working Group Last Call for comments on=20
http://tools.ietf.org/id/draft-ietf-dime-pmip6-01.txt

Please send your comments to the list by March 21, 2009.=20

Ciao=20
Hannes & Dave


From wwwrun@core3.amsl.com  Mon Mar  9 08:17:04 2009
Return-Path: <wwwrun@core3.amsl.com>
X-Original-To: dime@ietf.org
Delivered-To: dime@core3.amsl.com
Received: by core3.amsl.com (Postfix, from userid 30) id CBB9C3A6C44; Mon,  9 Mar 2009 08:17:04 -0700 (PDT)
X-idtracker: yes
To: IETF-Announce <ietf-announce@ietf.org> 
From: The IESG <iesg-secretary@ietf.org>
Message-Id: <20090309151704.CBB9C3A6C44@core3.amsl.com>
Date: Mon,  9 Mar 2009 08:17:04 -0700 (PDT)
Cc: dime@ietf.org
Subject: [Dime] Last Call: draft-ietf-dime-mip6-split (Diameter Mobile IPv6: Support for Home Agent to Diameter Server Interaction) to Proposed Standard
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ietf@ietf.org
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2009 15:17:04 -0000

The IESG has received a request from the Diameter Maintenance and 
Extensions WG (dime) to consider the following document:

- 'Diameter Mobile IPv6: Support for Home Agent to Diameter Server 
   Interaction '
   <draft-ietf-dime-mip6-split-16.txt> as a Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action.  Please send substantive comments to the
ietf@ietf.org mailing lists by 2009-03-23. Exceptionally, 
comments may be sent to iesg@ietf.org instead. In either case, please 
retain the beginning of the Subject line to allow automated sorting.

The file can be obtained via
http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.txt


IESG discussion can be tracked via
https://datatracker.ietf.org/public/pidtracker.cgi?command=view_id&dTag=14871&rfc_flag=0

The following IPR Declarations may be related to this I-D:

https://datatracker.ietf.org/ipr/964/ 



From Hannes.Tschofenig@gmx.net  Mon Mar  9 11:07:17 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0584B3A6D0A for <dime@core3.amsl.com>; Mon,  9 Mar 2009 11:07:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.589
X-Spam-Level: 
X-Spam-Status: No, score=-1.589 tagged_above=-999 required=5 tests=[AWL=-0.479, BAYES_05=-1.11]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qICtQ3LTUHDf for <dime@core3.amsl.com>; Mon,  9 Mar 2009 11:07:16 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id B9FC53A6D00 for <dime@ietf.org>; Mon,  9 Mar 2009 11:07:15 -0700 (PDT)
Received: (qmail invoked by alias); 09 Mar 2009 18:07:48 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp066) with SMTP; 09 Mar 2009 19:07:48 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18sdGkKY6YsXJ8xekVqwDxkUt2KySzwNzLxv9i41j 9L7U4qmNHhPcHP
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dime@ietf.org>
Date: Mon, 9 Mar 2009 20:08:50 +0200
Message-ID: <004c01c9a0e2$1c4692d0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Acmg4hk9MHfa8HRYQIuYMK87iAs38g==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.8100000000000001
Subject: [Dime] AGENDA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2009 18:07:17 -0000

A slightly updated agenda: 
http://www.ietf.org/proceedings/09mar/agenda/dime.txt 

Ciao
Hannes & Dave



From root@core3.amsl.com  Mon Mar  9 15:30:01 2009
Return-Path: <root@core3.amsl.com>
X-Original-To: dime@ietf.org
Delivered-To: dime@core3.amsl.com
Received: by core3.amsl.com (Postfix, from userid 0) id C3B583A6CE8; Mon,  9 Mar 2009 15:30:01 -0700 (PDT)
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Content-Type: Multipart/Mixed; Boundary="NextPart"
Mime-Version: 1.0
Message-Id: <20090309223001.C3B583A6CE8@core3.amsl.com>
Date: Mon,  9 Mar 2009 15:30:01 -0700 (PDT)
Cc: dime@ietf.org
Subject: [Dime] I-D Action:draft-ietf-dime-qos-parameters-10.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2009 22:30:01 -0000

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Diameter Maintenance and Extensions Working Group of the IETF.


	Title           : Quality of Service Parameters for Usage with Diameter
	Author(s)       : J. Korhonen, et al.
	Filename        : draft-ietf-dime-qos-parameters-10.txt
	Pages           : 10
	Date            : 2009-03-09

This document defines a number of Quality of Service (QoS) parameters
that can be reused for conveying QoS information within Diameter.

The defined QoS information includes data traffic parameters for
describing a token bucket filter, a bandwidth parameter, and a per-
hop behavior class object.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-10.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-dime-qos-parameters-10.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2009-03-09152718.I-D@ietf.org>


--NextPart--

From elwynd@dial.pipex.com  Mon Mar  9 16:04:58 2009
Return-Path: <elwynd@dial.pipex.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 430863A6CFD for <dime@core3.amsl.com>; Mon,  9 Mar 2009 16:04:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -96.093
X-Spam-Level: 
X-Spam-Status: No, score=-96.093 tagged_above=-999 required=5 tests=[AWL=-1.925, BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZIu0ewh50-38 for <dime@core3.amsl.com>; Mon,  9 Mar 2009 16:04:57 -0700 (PDT)
Received: from c.painless.aaisp.net.uk (c.painless.aaisp.net.uk [IPv6:2001:8b0:0:30::51bb:1e35]) by core3.amsl.com (Postfix) with ESMTP id 1B7083A69F4 for <dime@ietf.org>; Mon,  9 Mar 2009 16:04:57 -0700 (PDT)
Received: from 251.254.187.81.in-addr.arpa ([81.187.254.251]) by c.painless.aaisp.net.uk with esmtp (Exim 4.69) (envelope-from <elwynd@dial.pipex.com>) id 1LgoXJ-0000ec-OH for dime@ietf.org; Mon, 09 Mar 2009 23:05:29 +0000
Message-ID: <49B5A0AD.3050707@dial.pipex.com>
Date: Mon, 09 Mar 2009 23:05:17 +0000
From: Elwyn Davies <elwynd@dial.pipex.com>
User-Agent: Thunderbird 2.0.0.14 (X11/20080421)
MIME-Version: 1.0
To: dime@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Clear (Version: ClamAV 0.94/8571/Wed Nov  5 11:25:50 2008, by smtp.aaisp.net.uk)
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Mar 2009 23:04:58 -0000

Hi.

I support the decision to remove the parameters.

Regards,
Elwyn Davies

> Hi all, 
>
> we have a normative reference in the Diameter QoS parameter draft 
> http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-09.txt
> pointing to http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>
> Yesterday, Magnus posted a mail to the TSVWG list that
> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems getting
> through the IESG and the document bounced back to the working group. The
> mail can be found here: 
> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>
> Now, there is the risk of considerable delay in publication of our Diameter
> QoS parameter document as it will be blocked (for potentially a long time).
> Since the Diameter QoS attribute and the Diameter QoS application document
> normatively depend on the QoS parameter document they will be blocked as
> well. 
>
> So, I have been thinking of what we could do to deal with this issue and
> here is a proposal to the group. 
>
> ***************
> My proposal is to move the priority parameters (Priority AVP,
> Admission-Priority AVP, and ALRP AVP) into a separate document and to
> progress them independently to get the main part of the Diameter QoS
> parameters document finalized. 
> ***************
>
> Please let me know if you find this idea acceptable. Please respond as
> quickly as possible!
>
> Ciao
> Hannes
>
> PS: We would have to find an editor and authors for that the new document
> that contains the priority parameters but we can worry about that part
> larter. 
>
>   

From jengelh@medozas.de  Mon Mar  9 20:28:45 2009
Return-Path: <jengelh@medozas.de>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E723E3A6988 for <dime@core3.amsl.com>; Mon,  9 Mar 2009 20:28:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.091
X-Spam-Level: 
X-Spam-Status: No, score=-1.091 tagged_above=-999 required=5 tests=[AWL=1.158,  BAYES_00=-2.599, HELO_EQ_DE=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MHs4WxpbkUXg for <dime@core3.amsl.com>; Mon,  9 Mar 2009 20:28:45 -0700 (PDT)
Received: from sovereign.computergmbh.de (sovereign.computergmbh.de [85.214.69.204]) by core3.amsl.com (Postfix) with ESMTP id 1FAE73A6A90 for <dime@ietf.org>; Mon,  9 Mar 2009 20:28:44 -0700 (PDT)
Received: by sovereign.computergmbh.de (Postfix, from userid 25121) id 3BE182E4986; Tue, 10 Mar 2009 04:29:17 +0100 (CET)
Received: from localhost (localhost [127.0.0.1]) by sovereign.computergmbh.de (Postfix) with ESMTP id 3717C4699706 for <dime@ietf.org>; Tue, 10 Mar 2009 04:29:17 +0100 (CET)
Date: Tue, 10 Mar 2009 04:29:17 +0100 (CET)
From: Jan Engelhardt <jengelh@medozas.de>
Sender: jengelh@sovereign.computergmbh.de
To: dime@ietf.org
Message-ID: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: [Dime] Remarks/Inquiries about rfc3588bis16 changes
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 03:29:15 -0000

Greetings!


I do have a few remarks and questions regarding the latest -bis16 update 
and the protocol in general.
Quoting bis16.


|page 11
|
|Deprecated the exchange of CER/CEA message in the open state.

What would happen if such an exchange in the open state produces no 
common applications -- terminate connection, or remain in the open state?


|page 46
|
|	DiameterIdentity = FQDN/Realm

Here, DiameterIdentity changed from FQDN to FQDN/Realm. One AVP where 
DiameterIdentity is used is Origin-Host. However, since there is already 
an AVP Origin-Realm which contais the realm, is it really necessary to 
add the realm again, to Origin-Host?


|page 117
|-bis15
|+bis16
|
|-abrubtly shutdown by comparing the old value of the Origin-State-Id
|+abrupbtly shutdown by comparing the old value of the Origin-State-Id

Third try, the correct spelling is:	abruptly


|-11.5. Diameter TCP/SCTP and TLS Port Numbers
|+11.5. Diameter TCP, SCTP and TLS/TCP Port Numbers

The TLS/TCP port number should then also be assigned for TLS/SCTP.


From julien.bournelle@gmail.com  Tue Mar 10 03:13:41 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8977B3A6CED for <dime@core3.amsl.com>; Tue, 10 Mar 2009 03:13:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cqtaXbjOKAWo for <dime@core3.amsl.com>; Tue, 10 Mar 2009 03:13:40 -0700 (PDT)
Received: from mail-gx0-f167.google.com (mail-gx0-f167.google.com [209.85.217.167]) by core3.amsl.com (Postfix) with ESMTP id 5F5663A6905 for <dime@ietf.org>; Tue, 10 Mar 2009 03:13:40 -0700 (PDT)
Received: by gxk11 with SMTP id 11so766451gxk.13 for <dime@ietf.org>; Tue, 10 Mar 2009 03:14:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=lqkaKGzj99Sr89q3+1kjE1yRk0sWCHR+toJbyumrQJo=; b=UI1ihO0aUfAc3paUOb1rFRFXa1pPCRlJR6NG0tTp5jaub1Mqz6uCOatqod3MVgueXf s+yZ04NUsuNom+l6Om1HdrxzsoQz/8IG2XWqM5E/hScUf7b+CZVgOh+zcSc7GMQEC2yv ajsYMGZ3I5CToY41yJCbDwi80796FE/ldAbKQ=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=Y0vDNBWqTFZ51p12JA73G1wiUGhMnsZl8zB+f/T/ZafOMl9ro3j+4m24X8eBmK30E/ RGBUmxM6BG01fJ7zVeJpmOavEm2SPJGWtBYbfU2fv0VlAxFBAX5rPBaiZQZidlCvvTaw LAmuPtcvBaGU4bBOUkDvMIvJhfUtP9l81xNDk=
MIME-Version: 1.0
Received: by 10.220.95.75 with SMTP id c11mr2248626vcn.1.1236680055010; Tue,  10 Mar 2009 03:14:15 -0700 (PDT)
In-Reply-To: <021601c99f18$ee622250$0201a8c0@nsnintra.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net>
Date: Tue, 10 Mar 2009 11:14:14 +0100
Message-ID: <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: dime@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 10:13:41 -0000

Hi hannes,

On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig
<Hannes.Tschofenig@gmx.net> wrote:
> I also have to add ...
>
> If you define a new Diameter Application ID then you have to decide which
> application to use as a baseline. If you look at Section 5.1 of
> http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.txt the=
n
> you see that the Mobile IPv6 specific AVPs are optional in the Command Co=
de
> ABNF. Hence, building on EAP is probably not such a bad idea.

 Not sure to understand your comment. If we define a new App-Id we
won't build the application on Diameter EAP. It will be orthogonal.
What do you mean ?
>
> There is also the question how much you want to say about Mobile IPv6
> bootstrapping in the ERP document.

 Yes, Diameter ERP could be used along with Diameter EAP or Diameter
Mobile IPv6.

 Regards,

 Julien



>
> Ciao
> Hannes
>
>>-----Original Message-----
>>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>>Sent: 04 March, 2009 12:03
>>To: Hannes Tschofenig
>>Cc: dime@ietf.org
>>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>(non-roaming case)
>>
>>hi hannes,
>>
>> see inline,
>>
>>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
>><Hannes.Tschofenig@gmx.net> wrote:
>>> Hi Julien,
>>>
>>> When we discussed this at the phone conference call (and the
>>> discussion is also captured in the meeting minutes) then I thought
>>> that the conclusion was to define a new Diameter application
>>for this exchange:
>>>
>>>
>>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0Server
>>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=3D=3D=3D=3D=3D=
=3D
>>>
>>> =A0 =A0[<-- EAP-Initiate/ -----
>>> =A0 =A0 =A0 =A0Re-auth-Start]
>>> =A0 =A0[<-- EAP-Request/ ------
>>> =A0 =A0 =A0 =A0Identity]
>>>
>>>
>>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Re-auth/
>>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>>>
>>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Re-auth=
/
>>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>>>
>>> =A0 Note: [] brackets indicate optionality.
>>>
>>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP Exchan=
ge
>>>
>>> (The server in the figure above is the HOKEY server, a dedicated
>>> entity.)
>>>
>>>
>>> The initial EAP authentication is left untouched and, as Glen
>>> explained us, there is the assumption that the AAA entities work
>>> together with the HOKEY servers in a non-standardized way.
>>To me that sounded like a good plan.
>>>
>>> Does this make any sense?
>>
>> Taking into accounts that we have one app-id for Diameter EAP
>>(I would say NASREQ-EAP) AND soon another app-id for Diameter
>>MIP6 (which also use EAP for authentication). It certainly
>>make sense to not reuse the same App-ID for ERP if we want to
>>use ERP for the mip6 case.
>>
>> Let's see if others have opinion.
>>
>> Regards,
>>
>> Julien
>>
>>>
>>>
>>> The non-HOKEY expert
>>> Hannes
>>>
>>> PS: I never said that this is specific document is going to
>>be trivial
>>> :-)
>>>
>>>>-----Original Message-----
>>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf
>>>>Of Julien Bournelle
>>>>Sent: 04 March, 2009 09:05
>>>>To: dime@ietf.org
>>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>>>(non-roaming case)
>>>>
>>>>Hi all,
>>>>
>>>> we try to solve the issue concerning the need for a new
>>App-Id or not.
>>>>
>>>> The ERP protocol (RFC 5296) is to be used along with EAP. It
>>>>basically defines two new EAP codes and uses keying material derived
>>>>from a first EAP authentication.
>>>>
>>>> To start the discussion, let's take the non-roaming case.
>>>>
>>>> In non-roaming, we have first an EAP authentication using Diameter
>>>>EAP.
>>>> Then, for reauthentication using ERP, we have two messages
>>>>(Request/Response) =A0between NAS and the AAA/ERP server carrying EAP
>>>>packets
>>>>
>>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>>>
>>>> So, either we reuse the Diameter EAP Application (DER/DEA) or we
>>>>define a new Diameter Application.
>>>>
>>>> If we use a new Diameter Application, a new Diameter
>>session will be
>>>>created and eventually a new Diameter server will be reached. What
>>>>bothers me in this case is that we basically perform a
>>>>reauthentication for the same session which is primarly
>>handled at the
>>>>AAA/EAP server. So, i'm wondering what happens concerning
>>>>Authorization Lifetime session etc..
>>>>
>>>> Note that I still don't have strong opinion and I'll be
>>glad to hear
>>>>opinions from others.
>>>>
>>>> Regards,
>>>>
>>>> Julien
>>>>_______________________________________________
>>>>DiME mailing list
>>>>DiME@ietf.org
>>>>https://www.ietf.org/mailman/listinfo/dime
>>>>
>>>
>>>
>>
>
>

From vshaikh@telcordia.com  Tue Mar 10 06:04:42 2009
Return-Path: <vshaikh@telcordia.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 105203A682D for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:04:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZvJsHscjo4VS for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:04:41 -0700 (PDT)
Received: from dnsmx1rrc.telcordia.com (dnsmx1rrc.telcordia.com [128.96.20.41]) by core3.amsl.com (Postfix) with ESMTP id 27DB93A6A82 for <dime@ietf.org>; Tue, 10 Mar 2009 06:04:40 -0700 (PDT)
Received: from pya-dte-ieg01.dte.telcordia.com (pya-dte-ieg01.cc.telcordia.com [128.96.20.21]) by dnsmx1rrc.telcordia.com (8.13.8+Sun/8.13.8) with ESMTP id n2AD5FE3017642 for <dime@ietf.org>; Tue, 10 Mar 2009 09:05:15 -0400 (EDT)
X-AuditID: 80601415-0000111400000554-0d-49b6658711aa
Received: from rrc-dte-exhb1.dte.telcordia.com ([128.96.20.12]) by pya-dte-ieg01.dte.telcordia.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 10 Mar 2009 09:05:11 -0400
Received: from rrc-dte-exmb2.dte.telcordia.com ([128.96.180.27]) by rrc-dte-exhb1.dte.telcordia.com ([128.96.20.12]) with mapi; Tue, 10 Mar 2009 09:05:11 -0400
From: "Shaikh, Viqar A" <vshaikh@telcordia.com>
To: "dime@ietf.org" <dime@ietf.org>
Date: Tue, 10 Mar 2009 09:03:50 -0400
Thread-Topic: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
Thread-Index: AcmhC6Gx2iz8teugQ0y70AGINzYO5gAdQa0Y
Message-ID: <8B6A9EC265011E4CB70F99C64426E8C203E627DBBF@rrc-dte-exmb2.dte.telcordia.com>
References: <49B5A0AD.3050707@dial.pipex.com>
In-Reply-To: <49B5A0AD.3050707@dial.pipex.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: AAAAAA==
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 13:04:42 -0000

Hello,

Are these parameters to be removed (Priority AVP,
> Admission-Priority AVP, and ALRP AVP) related to QoS priority or priority=
 for an government authorized call/session?

Regards,
Viqar
________________________________________
From: dime-bounces@ietf.org [dime-bounces@ietf.org] On Behalf Of Elwyn Davi=
es [elwynd@dial.pipex.com]
Sent: Monday, March 09, 2009 7:05 PM
To: dime@ietf.org
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE

Hi.

I support the decision to remove the parameters.

Regards,
Elwyn Davies

> Hi all,
>
> we have a normative reference in the Diameter QoS parameter draft
> http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-09.txt
> pointing to http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>
> Yesterday, Magnus posted a mail to the TSVWG list that
> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems gettin=
g
> through the IESG and the document bounced back to the working group. The
> mail can be found here:
> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>
> Now, there is the risk of considerable delay in publication of our Diamet=
er
> QoS parameter document as it will be blocked (for potentially a long time=
).
> Since the Diameter QoS attribute and the Diameter QoS application documen=
t
> normatively depend on the QoS parameter document they will be blocked as
> well.
>
> So, I have been thinking of what we could do to deal with this issue and
> here is a proposal to the group.
>
> ***************
> My proposal is to move the priority parameters (Priority AVP,
> Admission-Priority AVP, and ALRP AVP) into a separate document and to
> progress them independently to get the main part of the Diameter QoS
> parameters document finalized.
> ***************
>
> Please let me know if you find this idea acceptable. Please respond as
> quickly as possible!
>
> Ciao
> Hannes
>
> PS: We would have to find an editor and authors for that the new document
> that contains the priority parameters but we can worry about that part
> larter.
>
>
_______________________________________________
DiME mailing list
DiME@ietf.org
https://www.ietf.org/mailman/listinfo/dime

From vfajardo@tari.toshiba.com  Tue Mar 10 06:30:24 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E53C93A6D0A for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:30:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.667
X-Spam-Level: 
X-Spam-Status: No, score=-2.667 tagged_above=-999 required=5 tests=[AWL=-0.068, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pUMwOgITGpKu for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:30:24 -0700 (PDT)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id DD3583A6B1A for <dime@ietf.org>; Tue, 10 Mar 2009 06:30:23 -0700 (PDT)
Received: from [127.0.0.1] (smtp.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n2ADPpg0070638; Tue, 10 Mar 2009 08:25:51 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49B66B91.4000605@tari.toshiba.com>
Date: Tue, 10 Mar 2009 09:30:57 -0400
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: Jan Engelhardt <jengelh@medozas.de>
References: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr>
In-Reply-To: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Remarks/Inquiries about rfc3588bis16 changes
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 13:30:25 -0000

Hi Jan,
> Greetings!
>
>
> I do have a few remarks and questions regarding the latest -bis16 update 
> and the protocol in general.
> Quoting bis16.
>
>
> |page 11
> |
> |Deprecated the exchange of CER/CEA message in the open state.
>
> What would happen if such an exchange in the open state produces no 
> common applications -- terminate connection, or remain in the open state?
>   

In this version of the base protocol, it is not expected that CER/CEA 
will be exchanged in the open state. It is one of the features in bis 
(diameter v2) that is not very backward compatible. Though a separate 
solution is in the works.

>
> |page 46
> |
> |	DiameterIdentity = FQDN/Realm
>
> Here, DiameterIdentity changed from FQDN to FQDN/Realm. One AVP where 
> DiameterIdentity is used is Origin-Host. However, since there is already 
> an AVP Origin-Realm which contais the realm, is it really necessary to 
> add the realm again, to Origin-Host?
>   

Hmm... the expansion of the context of DiameterIdentity does not include 
an assumption that concatenation of Origin-Host and Origin-Realm would 
form an FQDN. It is probably cleanest to keep Origin-Host as it is since 
there maybe future use cases where Origin-Host is re-used by itself, 
i.e. without any other realm avp accompanying it.

>
> |page 117
> |-bis15
> |+bis16
> |
> |-abrubtly shutdown by comparing the old value of the Origin-State-Id
> |+abrupbtly shutdown by comparing the old value of the Origin-State-Id
>
> Third try, the correct spelling is:	abruptly
>   

Ok

>
> |-11.5. Diameter TCP/SCTP and TLS Port Numbers
> |+11.5. Diameter TCP, SCTP and TLS/TCP Port Numbers
>
> The TLS/TCP port number should then also be assigned for TLS/SCTP.
>   

The new security changes does not support TLS/SCTP. We can clarify this.

regards,
victor

> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>
>
>   


From avi@bridgewatersystems.com  Tue Mar 10 06:56:24 2009
Return-Path: <avi@bridgewatersystems.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E2A743A6908 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:56:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c8-jLMGuLLwG for <dime@core3.amsl.com>; Tue, 10 Mar 2009 06:56:19 -0700 (PDT)
Received: from webmail.bridgewatersystems.com (webmail.bridgewatersystems.com [66.46.199.134]) by core3.amsl.com (Postfix) with ESMTP id EA7BA3A6A35 for <dime@ietf.org>; Tue, 10 Mar 2009 06:56:18 -0700 (PDT)
Received: from exchange02.bridgewatersys.com ([192.168.150.32]) by exchange02.bridgewatersys.com ([192.168.150.32]) with mapi; Tue, 10 Mar 2009 09:56:53 -0400
From: Avi Lior <avi@bridgewatersystems.com>
To: jouni korhonen <jouni.nospam@gmail.com>
Date: Tue, 10 Mar 2009 09:56:50 -0400
Thread-Topic: Dime NAI Routing
Thread-Index: AcmcUbE6xPwAMwYjT5WMkfE7rHNyqgFMolgg
Message-ID: <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com>
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com> <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com>
In-Reply-To: <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "dime@ietf.org" <dime@ietf.org>, Mark Jones <Mark.Jones@bridgewatersystems.com>, "Lionel.morand@orange-ftgroup.com" <Lionel.morand@orange-ftgroup.com>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 13:56:25 -0000

I have inline comments as well as new comment:

The over arching problem as I see it is that when you read the document, at=
 least the introduction and abstract you get the sense that the draft is in=
tending to fix base diameter behavior.

But in responses I get, I get the feeling that the intent is really to have=
 an Application based routing scheme using NAI.



If you are trying to fix base then we need a robust backwards compatible wa=
y of doing things.  As well, we can argue whether or not it should be place=
d in DIME.  There is more work to do.

If you are trying to write a document that describes how one would do Appli=
cation routing using NAI. Then that does not belong in base so we should st=
op debating that.  And actually in this case what you are doing is fine and=
 you are probably there.

So which is it?  And once we pick we should be clear in the text.

We could come up with a hybrid solution by the way.

If the priority is to make sure that the packet gets to the destination, th=
en:
You set the destination-realm to the final destination and intermediaries t=
hat support decorated NAI use the decorated NAI without modification to the=
 destination-realm.  Intermediaries that don't know about decorated NAI wil=
l just perform the destination-realm routing.  As you point out you get loo=
ping but its not infinite looping.  At least the message would get to the f=
inal destination.

If NAI routing is the most important thing then you set the destination-rea=
lm to the next hop of the Decorated NAI.  Each hop that supports this schem=
e will use the decorated-nai and will update the realm.  If a hop is reache=
d that does not understand decorated NAI then the packet will be consumed l=
ocally.


Please see inline for more comments=20

> -----Original Message-----
> From: jouni korhonen [mailto:jouni.nospam@gmail.com]=20
> Sent: March 3, 2009 5:44 PM
> To: Avi Lior
> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;=20
> tena@huawei.com; Hannes.Tschofenig@gmx.net; dime@ietf.org
> Subject: Re: Dime NAI Routing
>=20
> Hi Avi,
>=20
> Thanks for reading & commenting the I-D.
>=20
> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
>=20
> > A couple of comments:
> >
> > 1)  The draft should mention something about the presence of=20
> > Destination-Host AVP.
> >
> > The rule for routing is that the Destination-Host AVP is=20
> not looked at=20
> > until the message reaches the terminal realm as determined by the=20
> > decorated NAI.
>=20
> Where you would suggest to include the clarifying text? In=20
> Section 4.2.?

I don't know.  I will have to look at the draft. This is really a side issu=
e and depends on the intent of the draft.

>=20
>=20
> > 2) I dont like the way Destination-Realm is being used.
> >
> > The draft states that the destination realm is updated on a=20
> hop by hop=20
> > basis together with the decorated NAI.
>=20
> I assume that is the only way to ensure the request message=20
> really goes through all wanted realms.

Correct.  And in some cases NAI routing is going to be more important and i=
n some cases it will be more important to make sure the message makes it al=
l the way.
=20
>=20
> > If an intermediary is not compliant with the scheme=20
> presented by this=20
> > draft it will result in the intermediary consuming the=20
> message locally=20
> > - since the message contains the destination realm equal to
> > its realm.   Thus the message is not going to reach the destination.
>=20
> That is the reason why the I-D suggests only using the=20
> decoration stuff with a new application that is known to=20
> support this I-D. In that way legacy agents can be bypassed.

Okay so here you are clear this is Application based routing.

> >
> > Instead, I propose that the destination realm should be=20
> always set to=20
> > the terminal realm, thus:
> >
> > Agents that are compliant with the draft will first look at=20
> the NAI to=20
> > determine whether the packet has reached the terminal realm=20
> or where=20
> > it should be routed next;
>=20
> Are you proposing to make the routing decision based on the=20
> User-Name (and ignore the Destination-Realm all together) in=20
> cases where 1) the agent supports this I-D and 2) the=20
> User-Name contains a decorated NAI?
> Once the decorated NAI would have been "consumed" the=20
> checking would be based on the Destination-Realm again..?

Almost. In the case where you want to guarantee packet delivery irrespectiv=
e of whether nodes are compliant with this draft, then you set the destinat=
ion-realm to the final destination of the decorated NAI.  Agents that suppo=
rt your scheme would use the decorated NAI to determine how to route to the=
 next hop.  Agents that don't support your scheme will use the destination-=
realm to determine how to route to the next hop (they will ignore the decor=
ated NAI).

> > Agents that are not compatible with the draft will use the=20
> old rules=20
> > for routing and would route the message according to the=20
> destination-=20
> > realm only and thus the message will reach the final destintaion=20
> > albeit not necessarily according to the decorated NAI. But=20
> at least it=20
> > would work.
> >
> >
> > Did I miss anything?
>=20
> What happens if.. the route happens to have some=20
> non-compliant agents and when the request reaches its final=20
> end (e.g. according to the inter-connection architecture) the=20
> User-Name still has decorated NAI?
> Would the decorated NAI compliant server/proxy send to=20
> request back to some other realm pointed by the User-name?=20
> This would effectively cause a routing loop, right?
 No. It may cause a loop but it wont be an infinite loop.  So it depends, i=
n some cases I may be okay with have strange routing but I will at least ge=
t the packet there. So it depends what I want to achieve.

>=20
> Cheers,
>         Jouni
>=20
>=20
>=20
> >
> >
>=20
> =

From Hannes.Tschofenig@gmx.net  Tue Mar 10 07:56:08 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EDFED3A67F5 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 07:56:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.331
X-Spam-Level: 
X-Spam-Status: No, score=-2.331 tagged_above=-999 required=5 tests=[AWL=0.268,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EDA-Lpbd6yow for <dime@core3.amsl.com>; Tue, 10 Mar 2009 07:56:08 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 7FF5A3A67BD for <dime@ietf.org>; Tue, 10 Mar 2009 07:56:07 -0700 (PDT)
Received: (qmail invoked by alias); 10 Mar 2009 14:56:41 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp056) with SMTP; 10 Mar 2009 15:56:41 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19R0A01XIZRoKjOTUn137RQaFRE5B0XscFVIqo9ID IzhuShmI4kKsNw
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Shaikh, Viqar A'" <vshaikh@telcordia.com>, <dime@ietf.org>
References: <49B5A0AD.3050707@dial.pipex.com> <8B6A9EC265011E4CB70F99C64426E8C203E627DBBF@rrc-dte-exmb2.dte.telcordia.com>
Date: Tue, 10 Mar 2009 16:57:44 +0200
Message-ID: <07b401c9a190$939ea4e0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <8B6A9EC265011E4CB70F99C64426E8C203E627DBBF@rrc-dte-exmb2.dte.telcordia.com>
Thread-Index: AcmhC6Gx2iz8teugQ0y70AGINzYO5gAdQa0YAAOgq0A=
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.53
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 14:56:09 -0000

Hi Viqar, 

It seems that most folks in the group prefer a couple of parameters to be
moved into a separate document (and thereby removed from the current
document) because of the suddenly appeared dependency problem. We are
already late with this document and we need to get it out of the door. 

Related to your question: QoS priority vs. priority for an government
authorized call/session?

When referring to the parameter in the document then what was done is
essentially the following:

* There is a container (Diameter AVP)
* There is a registry (originally created by RFC 4412 and later extended to
represent the textual values in a numeric fashion with
http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11.
* The syntax of the previously created values is simple; they are just
numbers.
* The semantic of the values is essentially unspecified in these documents
-- James Polk would say "this is policy".

The important issue seems to be how these AVPs that contain these values are
used inside Diameter. The answer is: It depends on the scenario and on the
context. So, getting back to your question: the same AVP can used in either
scenario. 

Does this answer your question in any way?  

Ciao
Hannes 

>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On 
>Behalf Of Shaikh, Viqar A
>Sent: 10 March, 2009 15:04
>To: dime@ietf.org
>Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>
>Hello,
>
>Are these parameters to be removed (Priority AVP,
>> Admission-Priority AVP, and ALRP AVP) related to QoS 
>priority or priority for an government authorized call/session?
>
>Regards,
>Viqar
>________________________________________
>From: dime-bounces@ietf.org [dime-bounces@ietf.org] On Behalf 
>Of Elwyn Davies [elwynd@dial.pipex.com]
>Sent: Monday, March 09, 2009 7:05 PM
>To: dime@ietf.org
>Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
>Hi.
>
>I support the decision to remove the parameters.
>
>Regards,
>Elwyn Davies
>
>> Hi all,
>>
>> we have a normative reference in the Diameter QoS parameter draft 
>> 
>http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-09.
>> txt pointing to 
>> http://tools.ietf.org/html/draft-ietf-tsvwg-emergency-rsvp-11
>>
>> Yesterday, Magnus posted a mail to the TSVWG list that 
>> draft-ietf-tsvwg-emergency-rsvp-11.txt is having a lot of problems 
>> getting through the IESG and the document bounced back to 
>the working 
>> group. The mail can be found here:
>> http://www.ietf.org/mail-archive/web/tsvwg/current/msg09070.html
>>
>> Now, there is the risk of considerable delay in publication of our 
>> Diameter QoS parameter document as it will be blocked (for 
>potentially a long time).
>> Since the Diameter QoS attribute and the Diameter QoS application 
>> document normatively depend on the QoS parameter document 
>they will be 
>> blocked as well.
>>
>> So, I have been thinking of what we could do to deal with this issue 
>> and here is a proposal to the group.
>>
>> ***************
>> My proposal is to move the priority parameters (Priority AVP, 
>> Admission-Priority AVP, and ALRP AVP) into a separate 
>document and to 
>> progress them independently to get the main part of the Diameter QoS 
>> parameters document finalized.
>> ***************
>>
>> Please let me know if you find this idea acceptable. Please 
>respond as 
>> quickly as possible!
>>
>> Ciao
>> Hannes
>>
>> PS: We would have to find an editor and authors for that the new 
>> document that contains the priority parameters but we can 
>worry about 
>> that part larter.
>>
>>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>


From Hannes.Tschofenig@gmx.net  Tue Mar 10 08:05:58 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 995033A699D for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:05:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.334
X-Spam-Level: 
X-Spam-Status: No, score=-2.334 tagged_above=-999 required=5 tests=[AWL=0.265,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kp40Vsd3auoQ for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:05:57 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 138063A6946 for <dime@ietf.org>; Tue, 10 Mar 2009 08:05:56 -0700 (PDT)
Received: (qmail invoked by alias); 10 Mar 2009 15:06:31 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp065) with SMTP; 10 Mar 2009 16:06:31 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18azoglgm8awuUm/bFSjkdMZAwaHA+TMmyOLp7yvS OGvCOAyyT3dywY
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>
Date: Tue, 10 Mar 2009 17:07:37 +0200
Message-ID: <07bc01c9a191$f31c2e50$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>
Thread-Index: AcmhaPcIlcqzYb4FTD+11cMc8vn4qQAKGjOw
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.5
Cc: dime@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 15:05:58 -0000

Hi Julien=20

>Hi hannes,
>
>On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig=20
><Hannes.Tschofenig@gmx.net> wrote:
>> I also have to add ...
>>
>> If you define a new Diameter Application ID then you have to decide=20
>> which application to use as a baseline. If you look at=20
>Section 5.1 of=20
>>=20
>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.txt=20
>> then you see that the Mobile IPv6 specific AVPs are optional in the=20
>> Command Code ABNF. Hence, building on EAP is probably not=20
>such a bad idea.
>
> Not sure to understand your comment. If we define a new=20
>App-Id we won't build the application on Diameter EAP. It will=20
>be orthogonal.
>What do you mean ?

When you register a new Diameter Application ID then you need to decide=20
* what Command Codes are needed
* what AVPs are carried inside these Command Codes.=20

Many past Diameter application designs have answered that question in =
way
that they said: I re-use an existing application and extend it.=20

This is essentially what I am suggesting here. You could build your new
application on top of Diameter Mobile IPv6 IKE (which is Diameter EAP +
Mobility AVPs) + your own ERP AVPs.=20

>>
>> There is also the question how much you want to say about=20
>Mobile IPv6=20
>> bootstrapping in the ERP document.
>
> Yes, Diameter ERP could be used along with Diameter EAP or=20
>Diameter Mobile IPv6.

Ciao
Hannes

>
> Regards,
>
> Julien
>
>
>
>>
>> Ciao
>> Hannes
>>
>>>-----Original Message-----
>>>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>>>Sent: 04 March, 2009 12:03
>>>To: Hannes Tschofenig
>>>Cc: dime@ietf.org
>>>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>>(non-roaming case)
>>>
>>>hi hannes,
>>>
>>> see inline,
>>>
>>>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig=20
>>><Hannes.Tschofenig@gmx.net> wrote:
>>>> Hi Julien,
>>>>
>>>> When we discussed this at the phone conference call (and the=20
>>>> discussion is also captured in the meeting minutes) then I thought=20
>>>> that the conclusion was to define a new Diameter application
>>>for this exchange:
>>>>
>>>>
>>>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0Server
>>>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0=3D=3D=3D=3D=3D=3D
>>>>
>>>> =A0 =A0[<-- EAP-Initiate/ -----
>>>> =A0 =A0 =A0 =A0Re-auth-Start]
>>>> =A0 =A0[<-- EAP-Request/ ------
>>>> =A0 =A0 =A0 =A0Identity]
>>>>
>>>>
>>>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0Re-auth/
>>>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0[Bootstrap])
>>>>
>>>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
Re-auth/
>>>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
>>>>
>>>> =A0 Note: [] brackets indicate optionality.
>>>>
>>>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP =
Exchange
>>>>
>>>> (The server in the figure above is the HOKEY server, a dedicated
>>>> entity.)
>>>>
>>>>
>>>> The initial EAP authentication is left untouched and, as Glen=20
>>>> explained us, there is the assumption that the AAA entities work=20
>>>> together with the HOKEY servers in a non-standardized way.
>>>To me that sounded like a good plan.
>>>>
>>>> Does this make any sense?
>>>
>>> Taking into accounts that we have one app-id for Diameter EAP (I=20
>>>would say NASREQ-EAP) AND soon another app-id for Diameter
>>>MIP6 (which also use EAP for authentication). It certainly=20
>make sense=20
>>>to not reuse the same App-ID for ERP if we want to use ERP for the=20
>>>mip6 case.
>>>
>>> Let's see if others have opinion.
>>>
>>> Regards,
>>>
>>> Julien
>>>
>>>>
>>>>
>>>> The non-HOKEY expert
>>>> Hannes
>>>>
>>>> PS: I never said that this is specific document is going to
>>>be trivial
>>>> :-)
>>>>
>>>>>-----Original Message-----
>>>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org]=20
>On Behalf=20
>>>>>Of Julien Bournelle
>>>>>Sent: 04 March, 2009 09:05
>>>>>To: dime@ietf.org
>>>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>>>>(non-roaming case)
>>>>>
>>>>>Hi all,
>>>>>
>>>>> we try to solve the issue concerning the need for a new
>>>App-Id or not.
>>>>>
>>>>> The ERP protocol (RFC 5296) is to be used along with EAP. It=20
>>>>>basically defines two new EAP codes and uses keying=20
>material derived=20
>>>>>from a first EAP authentication.
>>>>>
>>>>> To start the discussion, let's take the non-roaming case.
>>>>>
>>>>> In non-roaming, we have first an EAP authentication using=20
>Diameter=20
>>>>>EAP.
>>>>> Then, for reauthentication using ERP, we have two messages
>>>>>(Request/Response) =A0between NAS and the AAA/ERP server=20
>carrying EAP=20
>>>>>packets
>>>>>
>>>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>>>>
>>>>> So, either we reuse the Diameter EAP Application (DER/DEA) or we=20
>>>>>define a new Diameter Application.
>>>>>
>>>>> If we use a new Diameter Application, a new Diameter
>>>session will be
>>>>>created and eventually a new Diameter server will be reached. What=20
>>>>>bothers me in this case is that we basically perform a=20
>>>>>reauthentication for the same session which is primarly
>>>handled at the
>>>>>AAA/EAP server. So, i'm wondering what happens concerning=20
>>>>>Authorization Lifetime session etc..
>>>>>
>>>>> Note that I still don't have strong opinion and I'll be
>>>glad to hear
>>>>>opinions from others.
>>>>>
>>>>> Regards,
>>>>>
>>>>> Julien
>>>>>_______________________________________________
>>>>>DiME mailing list
>>>>>DiME@ietf.org
>>>>>https://www.ietf.org/mailman/listinfo/dime
>>>>>
>>>>
>>>>
>>>
>>
>>
>


From Hannes.Tschofenig@gmx.net  Tue Mar 10 08:08:55 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA5603A6908 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:08:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.337
X-Spam-Level: 
X-Spam-Status: No, score=-2.337 tagged_above=-999 required=5 tests=[AWL=0.262,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id syiiQiLgp8of for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:08:51 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 2FAE63A68B1 for <dime@ietf.org>; Tue, 10 Mar 2009 08:08:51 -0700 (PDT)
Received: (qmail invoked by alias); 10 Mar 2009 15:09:25 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp040) with SMTP; 10 Mar 2009 16:09:25 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1+Q4yJyiLKQFzuGe/kNSfpd7TXBewcpa3npk16+q6 W5BLVwzU9PlAIB
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Romascanu, Dan \(Dan\)'" <dromasca@avaya.com>, "Tschofenig, Hannes \(NSN - FI/Espoo\)" <hannes.tschofenig@nsn.com>, "'ext Fortune HUANG'" <fqhuang@huawei.com>, <dime@ietf.org>, <magnus.westerlund@ericsson.com>
References: <3D3C75174CB95F42AD6BCC56E5555B45011B062A@FIESEXC015.nsn-intra.net> <006b01c99bd9$27290ce0$7b27460a@china.huawei.com> <3D3C75174CB95F42AD6BCC56E5555B45011B07FC@FIESEXC015.nsn-intra.net> <EDC652A26FB23C4EB6384A4584434A0401454528@307622ANEX5.global.avaya.com>
Date: Tue, 10 Mar 2009 17:10:30 +0200
Message-ID: <07bd01c9a192$5aa9e2b0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <EDC652A26FB23C4EB6384A4584434A0401454528@307622ANEX5.global.avaya.com>
Thread-Index: AcmZhnLBCottasOMTfm0ghEK2rc/lgA9JETQABTPjDAAKe36wAAXy3QwAAEhKAAADGmLMAFhr2WA
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.52
Subject: Re: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 15:08:55 -0000

Hi Dan, 
Hi Fortune, 

Normally, I would have said "Please provide text". :-)

But we have tried to provide more specific references with the latest
document update. I hope you both are happy now. 
Here is the updated document: 
http://www.ietf.org/internet-drafts/draft-ietf-dime-qos-parameters-10.txt

Ciao
Hannes

>-----Original Message-----
>From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com] 
>Sent: 03 March, 2009 16:24
>To: Tschofenig, Hannes (NSN - FI/Espoo); ext Fortune HUANG; 
>Hannes Tschofenig; dime@ietf.org; magnus.westerlund@ericsson.com
>Subject: RE: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>
> 
>
>> -----Original Message-----
>> From: Tschofenig, Hannes (NSN - FI/Espoo) 
>> [mailto:hannes.tschofenig@nsn.com]
>> Sent: Tuesday, March 03, 2009 10:29 AM
>> To: ext Fortune HUANG; Hannes Tschofenig; dime@ietf.org; 
>> magnus.westerlund@ericsson.com; Romascanu, Dan (Dan)
>> Subject: RE: [Dime] Diameter QoS Parameter -- DECISION TO MAKE
>> 
>> Hi Fortune,
>> 
>> >Hi Hannes,
>> >
>> >But I still think at least we should provide a brief 
>statement about 
>> >what the AVP indicates.
>> 
>> There is a brief statement about the AVPs in the beginning of the 
>> document.
>> 
>> >And I also would like to have
>> >the detailed location of the relevant reference in this
>> draft because
>> >it would be painful to go over another RFC just for the
>> meaning of one
>> >AVP.
>> 
>> Well. This is somewhat difficult. Think about DiffServ Code Points. 
>> Which part of what document would provide you the information you 
>> would like to know?
>> 
>
>Actually I agree with Fortune on this. If I understand him 
>well he is asking for a more exact pointer to the section in 
>the referred documents (e.g. Section 7.3 in [RFC xxxx] instead 
>of [RFC xxxx]). This is good practice and is possible in the 
>majority of the cases. Even in the case of DSCP we can point 
>to the section where the term is defined of first introduced. 
>
>Dan
>(speaking as a contributor)
>


From jengelh@medozas.de  Tue Mar 10 08:16:34 2009
Return-Path: <jengelh@medozas.de>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8ECCA3A6A9D for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:16:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.36
X-Spam-Level: 
X-Spam-Status: No, score=-1.36 tagged_above=-999 required=5 tests=[AWL=0.889,  BAYES_00=-2.599, HELO_EQ_DE=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KyW5o56sovLV for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:16:33 -0700 (PDT)
Received: from sovereign.computergmbh.de (sovereign.computergmbh.de [85.214.69.204]) by core3.amsl.com (Postfix) with ESMTP id 8229C3A6A14 for <dime@ietf.org>; Tue, 10 Mar 2009 08:16:33 -0700 (PDT)
Received: by sovereign.computergmbh.de (Postfix, from userid 25121) id 9A76243032; Tue, 10 Mar 2009 16:17:06 +0100 (CET)
Received: from localhost (localhost [127.0.0.1]) by sovereign.computergmbh.de (Postfix) with ESMTP id 991574045356; Tue, 10 Mar 2009 16:17:06 +0100 (CET)
Date: Tue, 10 Mar 2009 16:17:06 +0100 (CET)
From: Jan Engelhardt <jengelh@medozas.de>
Sender: jengelh@sovereign.computergmbh.de
To: Victor Fajardo <vfajardo@tari.toshiba.com>
In-Reply-To: <49B66B91.4000605@tari.toshiba.com>
Message-ID: <alpine.LSU.2.00.0903101610300.19523@fbirervta.pbzchgretzou.qr>
References: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr> <49B66B91.4000605@tari.toshiba.com>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Cc: dime@ietf.org
Subject: Re: [Dime] Remarks/Inquiries about rfc3588bis16 changes
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 15:16:34 -0000

On Tuesday 2009-03-10 14:30, Victor Fajardo wrote:
>> |page 11
>> |
>> |Deprecated the exchange of CER/CEA message in the open state.
>>
>> What would happen if such an exchange in the open state produces no common
>> applications -- terminate connection, or remain in the open state?
>
> In this version of the base protocol, it is not expected that CER/CEA will be
> exchanged in the open state. It is one of the features in bis (diameter v2)
> that is not very backward compatible. Though a separate solution is in the
> works.

Well the question (two actually) is: how was this handled in v1? And:
Consider the case where a broken v2 peer, or malicious v2 peer, issues
a CER in the open state to another v2, and what the non-evil peer should
be doing to keep security straight.

>> |page 46
>> |
>> |	DiameterIdentity = FQDN/Realm
>>
>> Here, DiameterIdentity changed from FQDN to FQDN/Realm. One AVP where
>> DiameterIdentity is used is Origin-Host. However, since there is already an
>> AVP Origin-Realm which contais the realm, is it really necessary to add the
>> realm again, to Origin-Host?
>
> Hmm... the expansion of the context of DiameterIdentity does not include an
> assumption that concatenation of Origin-Host and Origin-Realm would form an
> FQDN. It is probably cleanest to keep Origin-Host as it is since there maybe
> future use cases where Origin-Host is re-used by itself, i.e. without any other
> realm avp accompanying it.

Let me reword it: Should I append whatever has been determined to be
the value of Origin-Realm to the FQDN to obtain the DiameterIdentity
for Origin-Host when a peer creates new messages?

>> |-11.5. Diameter TCP/SCTP and TLS Port Numbers
>> |+11.5. Diameter TCP, SCTP and TLS/TCP Port Numbers
>>
>> The TLS/TCP port number should then also be assigned for TLS/SCTP.
>
> The new security changes does not support TLS/SCTP. We can clarify this.

May I ask why it is that TLS over (single-substream) SCTP is not 
supported/specified?



Jan

From Hannes.Tschofenig@gmx.net  Tue Mar 10 08:31:31 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E88D03A6850 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:31:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.34
X-Spam-Level: 
X-Spam-Status: No, score=-2.34 tagged_above=-999 required=5 tests=[AWL=0.259,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N+0UHW6aC7Io for <dime@core3.amsl.com>; Tue, 10 Mar 2009 08:31:30 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 766793A67F5 for <dime@ietf.org>; Tue, 10 Mar 2009 08:31:30 -0700 (PDT)
Received: (qmail invoked by alias); 10 Mar 2009 15:32:04 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp047) with SMTP; 10 Mar 2009 16:32:04 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18Nq8ctY3cNM4id0mJKScHH63JbMSZklciA64rqIb DBTHsPg60b+wb/
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'DOLLY, MARTIN C, ATTLABS'" <mdolly@att.com>, <dime@ietf.org>
References: <14C85D6CCBE92743AF33663BF5D24EBA0288CAC3@gaalpa1msgusr7e.ugd.att.com>
Date: Tue, 10 Mar 2009 17:33:09 +0200
Message-ID: <07c301c9a195$850b7750$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <14C85D6CCBE92743AF33663BF5D24EBA0288CAC3@gaalpa1msgusr7e.ugd.att.com>
Thread-Index: AcmTIQ3hjxM972AdTBqzxZWmkJbBlALgnTAQAE5BmSAAbTI3QA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.57
Subject: Re: [Dime] Question on draft-ietf-dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 15:31:32 -0000

Hi Martin, 
 
 	Hello,

	Questions on draft-ietf-dime-qos-parameters from the Dime Virtual
meeting of Feb 19th:

1) Is the ALRP AVP appropriate for call/session level or is it bearer
related? 

	 
[hannes] The ALRP AVP is taken from the NSIS and the RSVP work. Those
documents again took it from the SIP work. 

None of these documents describe the overall architecture. Protocol
designers sometimes define building blocks and let other folks figure out
how the entire stuff has to fit together. This is the "someone else's
problem approach". 

In relationship to the RSVP/NSIS work the ALRP parameter that is received by
RSVP/NSIS is then forwarded to the AAA server for authorization. 

In relationship to the SIP work these parameters also need to come from
somewhere (or at least they need to get authorized). Hence, there is also
the possibility to provide interworking with AAA (and Diameter in this
case). 

So, to answer your question. It can be related to both depending on the
scenario. 

2) If call/session level, draft-ietf-dime-qos-parameters-09.txt makes
reference to ietf-tsvwg-emergency-rsvp, which is bearer related. Is it also
bearer related?

[hannes] draft-ietf-dime-qos-parameters-09.txt made a reference to
ietf-tsvwg-emergency-rsvp since ietf-tsvwg-emergency-rsvp converts the RFC
4412 registry into numerical values. We use numerical values in the AVPs
rather than text strings as suggested by RFC 4412. 

Hence, we have to reference ietf-tsvwg-emergency-rsvp, which then references
RFC 4412. 

3) How can a user priority level be carried in this AVP at the call/session
level?

 3a) draft-ietf-dime-qos-parameters-09.txt is for QoS and there is
difference between QoS (bearer related) and signaling priority for a
call/session (e.g, priority call/session).  Correct?

[hannes] draft-ietf-dime-qos-parameters-09.txt defines a set of AVPs.
Depending on how you use them they might be directly related to the bearer
or for a SIP signaling session. 

 3b) In draft-ietf-dime-qos-parameters-09.txt, all AVPs (except may be the
ALRP AVP) are bearer/QoS associated.

[hannes] Well. One can argue that you can also use, for example, a bandwidth
parameter with a signaling session. So, it really depends a lot on how you
want to use these AVPs. 


>From the feedback of the guys in the group it seems that they preferred to
move these priority AVPs into a separate document (largely because of the
suddenly appeared dependency problem). It is probably a good idea if the new
document provides some examples to improve readability and understanding. I
think your feedback also suggests that further aspects are clarified in that
new document. 

Having said all the above, you will notice that
draft-ietf-dime-qos-parameters-10.txt does not contain the priority AVPs
anymore. Hence, when we move the priority AVPs into a new document I will
request review comments from you to determine whether things are better
described. 

Btw, you might also want to read through ietf-tsvwg-emergency-rsvp because
there ALRP is also used at the bearer level. Hence, your comments also apply
to the ietf-tsvwg-emergency-rsvp document.

Ciao
Hannes
 

	Thanks,
	Martin

	 

	 

	 



From glenzorn@comcast.net  Tue Mar 10 09:38:54 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A0B213A6947 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:38:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.254
X-Spam-Level: 
X-Spam-Status: No, score=-2.254 tagged_above=-999 required=5 tests=[AWL=0.345,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z2USlLuyUBIy for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:38:53 -0700 (PDT)
Received: from QMTA10.emeryville.ca.mail.comcast.net (qmta10.emeryville.ca.mail.comcast.net [76.96.30.17]) by core3.amsl.com (Postfix) with ESMTP id 62A993A684C for <dime@ietf.org>; Tue, 10 Mar 2009 09:38:53 -0700 (PDT)
Received: from OMTA03.emeryville.ca.mail.comcast.net ([76.96.30.27]) by QMTA10.emeryville.ca.mail.comcast.net with comcast id RRvt1b01l0b6N64AAUfVLr; Tue, 10 Mar 2009 16:39:29 +0000
Received: from gwzPC ([206.191.100.200]) by OMTA03.emeryville.ca.mail.comcast.net with comcast id RUfE1b01L4KR1eN8PUfGPY; Tue, 10 Mar 2009 16:39:26 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>, "'Hannes Tschofenig'" <Hannes.Tschofenig@gmx.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>
In-Reply-To: <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>
Date: Tue, 10 Mar 2009 09:38:26 -0700
Message-ID: <006b01c9a19e$aa68cf30$ff3a6d90$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcmhaPs1FWHACGiOTtqkh/c2rKtnWQANYvLg
Content-Language: en-us
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 16:38:54 -0000

Can we include the hokey WG in this discussion, please?

> -----Original Message-----
> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf =
Of
> Julien Bournelle
> Sent: Tuesday, March 10, 2009 3:14 AM
> To: Hannes Tschofenig
> Cc: dime@ietf.org
> Subject: Re: [Dime] DiME ERP: new Application ID or not ? (non-roaming
> case)
>=20
> Hi hannes,
>=20
> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig
> <Hannes.Tschofenig@gmx.net> wrote:
> > I also have to add ...
> >
> > If you define a new Diameter Application ID then you have to decide
> which
> > application to use as a baseline. If you look at Section 5.1 of
> > =
http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.txt
> then
> > you see that the Mobile IPv6 specific AVPs are optional in the
> Command Code
> > ABNF. Hence, building on EAP is probably not such a bad idea.
>=20
>  Not sure to understand your comment. If we define a new App-Id we
> won't build the application on Diameter EAP. It will be orthogonal.
> What do you mean ?
> >
> > There is also the question how much you want to say about Mobile =
IPv6
> > bootstrapping in the ERP document.
>=20
>  Yes, Diameter ERP could be used along with Diameter EAP or Diameter
> Mobile IPv6.
>=20
>  Regards,
>=20
>  Julien
>=20
>=20
>=20
> >
> > Ciao
> > Hannes
> >
> >>-----Original Message-----
> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
> >>Sent: 04 March, 2009 12:03
> >>To: Hannes Tschofenig
> >>Cc: dime@ietf.org
> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
> >>(non-roaming case)
> >>
> >>hi hannes,
> >>
> >> see inline,
> >>
> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
> >><Hannes.Tschofenig@gmx.net> wrote:
> >>> Hi Julien,
> >>>
> >>> When we discussed this at the phone conference call (and the
> >>> discussion is also captured in the meeting minutes) then I thought
> >>> that the conclusion was to define a new Diameter application
> >>for this exchange:
> >>>
> >>>
> >>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0Server
> >>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0=3D=3D=3D=3D=3D=3D
> >>>
> >>> =A0 =A0[<-- EAP-Initiate/ -----
> >>> =A0 =A0 =A0 =A0Re-auth-Start]
> >>> =A0 =A0[<-- EAP-Request/ ------
> >>> =A0 =A0 =A0 =A0Identity]
> >>>
> >>>
> >>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
> >>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0Re-auth/
> >>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
> >>>
> >>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
> >>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
Re-auth/
> >>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
> >>>
> >>> =A0 Note: [] brackets indicate optionality.
> >>>
> >>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP =
Exchange
> >>>
> >>> (The server in the figure above is the HOKEY server, a dedicated
> >>> entity.)
> >>>
> >>>
> >>> The initial EAP authentication is left untouched and, as Glen
> >>> explained us, there is the assumption that the AAA entities work
> >>> together with the HOKEY servers in a non-standardized way.
> >>To me that sounded like a good plan.
> >>>
> >>> Does this make any sense?
> >>
> >> Taking into accounts that we have one app-id for Diameter EAP
> >>(I would say NASREQ-EAP) AND soon another app-id for Diameter
> >>MIP6 (which also use EAP for authentication). It certainly
> >>make sense to not reuse the same App-ID for ERP if we want to
> >>use ERP for the mip6 case.
> >>
> >> Let's see if others have opinion.
> >>
> >> Regards,
> >>
> >> Julien
> >>
> >>>
> >>>
> >>> The non-HOKEY expert
> >>> Hannes
> >>>
> >>> PS: I never said that this is specific document is going to
> >>be trivial
> >>> :-)
> >>>
> >>>>-----Original Message-----
> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
> Behalf
> >>>>Of Julien Bournelle
> >>>>Sent: 04 March, 2009 09:05
> >>>>To: dime@ietf.org
> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
> >>>>(non-roaming case)
> >>>>
> >>>>Hi all,
> >>>>
> >>>> we try to solve the issue concerning the need for a new
> >>App-Id or not.
> >>>>
> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It
> >>>>basically defines two new EAP codes and uses keying material
> derived
> >>>>from a first EAP authentication.
> >>>>
> >>>> To start the discussion, let's take the non-roaming case.
> >>>>
> >>>> In non-roaming, we have first an EAP authentication using =
Diameter
> >>>>EAP.
> >>>> Then, for reauthentication using ERP, we have two messages
> >>>>(Request/Response) =A0between NAS and the AAA/ERP server carrying =
EAP
> >>>>packets
> >>>>
> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
> >>>>
> >>>> So, either we reuse the Diameter EAP Application (DER/DEA) or we
> >>>>define a new Diameter Application.
> >>>>
> >>>> If we use a new Diameter Application, a new Diameter
> >>session will be
> >>>>created and eventually a new Diameter server will be reached. What
> >>>>bothers me in this case is that we basically perform a
> >>>>reauthentication for the same session which is primarly
> >>handled at the
> >>>>AAA/EAP server. So, i'm wondering what happens concerning
> >>>>Authorization Lifetime session etc..
> >>>>
> >>>> Note that I still don't have strong opinion and I'll be
> >>glad to hear
> >>>>opinions from others.
> >>>>
> >>>> Regards,
> >>>>
> >>>> Julien
> >>>>_______________________________________________
> >>>>DiME mailing list
> >>>>DiME@ietf.org
> >>>>https://www.ietf.org/mailman/listinfo/dime
> >>>>
> >>>
> >>>
> >>
> >
> >
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime


From glenzorn@comcast.net  Tue Mar 10 09:45:43 2009
Return-Path: <glenzorn@comcast.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 49C413A6AED for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:45:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.369
X-Spam-Level: 
X-Spam-Status: No, score=-2.369 tagged_above=-999 required=5 tests=[AWL=0.230,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id olAF83yfr4PN for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:45:42 -0700 (PDT)
Received: from QMTA05.emeryville.ca.mail.comcast.net (qmta05.emeryville.ca.mail.comcast.net [76.96.30.48]) by core3.amsl.com (Postfix) with ESMTP id 6EB1728C14F for <dime@ietf.org>; Tue, 10 Mar 2009 09:45:42 -0700 (PDT)
Received: from OMTA11.emeryville.ca.mail.comcast.net ([76.96.30.36]) by QMTA05.emeryville.ca.mail.comcast.net with comcast id RPpy1b0050mlR8UA5UmJxB; Tue, 10 Mar 2009 16:46:18 +0000
Received: from gwzPC ([206.191.100.200]) by OMTA11.emeryville.ca.mail.comcast.net with comcast id RUm51b00L4KR1eN8XUm71k; Tue, 10 Mar 2009 16:46:16 +0000
From: "Glen Zorn" <glenzorn@comcast.net>
To: "'Jan Engelhardt'" <jengelh@medozas.de>
References: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr> <49B66B91.4000605@tari.toshiba.com>
In-Reply-To: <49B66B91.4000605@tari.toshiba.com>
Date: Tue, 10 Mar 2009 09:45:17 -0700
Message-ID: <006c01c9a19f$9e94e580$dbbeb080$@net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcmhhHUmA1Rs6VasTyWd0cjSeiwWuwAGqDvQ
Content-Language: en-us
Cc: dime@ietf.org
Subject: Re: [Dime] Remarks/Inquiries about rfc3588bis16 changes
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 16:45:43 -0000

> Hi Jan,
> > Greetings!
> >
> >
> > I do have a few remarks and questions regarding the latest -bis16
> update
> > and the protocol in general.
> > Quoting bis16.
> >
> >
> > |page 11
> > |
> > |Deprecated the exchange of CER/CEA message in the open state.
> >
> > What would happen if such an exchange in the open state produces no
> > common applications -- terminate connection, or remain in the open
> state?
> >
> 
> In this version of the base protocol, it is not expected that CER/CEA
> will be exchanged in the open state. It is one of the features in bis
> (diameter v2) that is not very backward compatible. Though a separate
> solution is in the works.

See
http://www.ietf.org/internet-drafts/draft-zorn-dime-capablities-update-00.tx
t; comments welcome!

...


From Hannes.Tschofenig@gmx.net  Tue Mar 10 09:56:15 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CB633A682F for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:56:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.346
X-Spam-Level: 
X-Spam-Status: No, score=-2.346 tagged_above=-999 required=5 tests=[AWL=0.253,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 85W+pE-We6Rw for <dime@core3.amsl.com>; Tue, 10 Mar 2009 09:56:14 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id CD5E13A68CB for <dime@ietf.org>; Tue, 10 Mar 2009 09:56:13 -0700 (PDT)
Received: (qmail invoked by alias); 10 Mar 2009 16:56:47 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp043) with SMTP; 10 Mar 2009 17:56:47 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1+f6zF1OlWfc0udlWlZ+sQ4E0PRAxgwyJ9sS/Hlji K2z5Gn0qQKVsp5
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Glen Zorn'" <glenzorn@comcast.net>, "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net><5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net>
Date: Tue, 10 Mar 2009 18:57:52 +0200
Message-ID: <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <006b01c9a19e$aa68cf30$ff3a6d90$@net>
Thread-Index: AcmhaPs1FWHACGiOTtqkh/c2rKtnWQANYvLgAACNNXA=
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.49
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 16:56:15 -0000

To quickly summarize for HOKEY WG members:=20

We are currently trying to make the main design assumptions for the =
Diameter
ERP work and we are currently leaning towards defining a new Diameter
application for ERP that builds on top of Diameter EAP and makes use of =
the
MIPv6 bootstrapping AVPs we have defined in
draft-ietf-dime-mip6-split-16.txt.

If you have an opinion about the Diameter ERP design please let us know
ASAP. We would like to cast these things in stone pretty quickly.
If you are planning to write code then drop us a note.=20

Ciao
Hannes

>-----Original Message-----
>From: hokey-bounces@ietf.org [mailto:hokey-bounces@ietf.org]=20
>On Behalf Of Glen Zorn
>Sent: 10 March, 2009 18:38
>To: 'Julien Bournelle'; 'Hannes Tschofenig'
>Cc: dime@ietf.org; hokey@ietf.org
>Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or=20
>not ?(non-roaming case)
>
>Can we include the hokey WG in this discussion, please?
>
>> -----Original Message-----
>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf=20
>> Of Julien Bournelle
>> Sent: Tuesday, March 10, 2009 3:14 AM
>> To: Hannes Tschofenig
>> Cc: dime@ietf.org
>> Subject: Re: [Dime] DiME ERP: new Application ID or not ?=20
>(non-roaming
>> case)
>>=20
>> Hi hannes,
>>=20
>> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig=20
>> <Hannes.Tschofenig@gmx.net> wrote:
>> > I also have to add ...
>> >
>> > If you define a new Diameter Application ID then you have to decide
>> which
>> > application to use as a baseline. If you look at Section 5.1 of=20
>> >=20
>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.tx
>> > t
>> then
>> > you see that the Mobile IPv6 specific AVPs are optional in the
>> Command Code
>> > ABNF. Hence, building on EAP is probably not such a bad idea.
>>=20
>>  Not sure to understand your comment. If we define a new App-Id we=20
>> won't build the application on Diameter EAP. It will be orthogonal.
>> What do you mean ?
>> >
>> > There is also the question how much you want to say about Mobile=20
>> > IPv6 bootstrapping in the ERP document.
>>=20
>>  Yes, Diameter ERP could be used along with Diameter EAP or Diameter=20
>> Mobile IPv6.
>>=20
>>  Regards,
>>=20
>>  Julien
>>=20
>>=20
>>=20
>> >
>> > Ciao
>> > Hannes
>> >
>> >>-----Original Message-----
>> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>> >>Sent: 04 March, 2009 12:03
>> >>To: Hannes Tschofenig
>> >>Cc: dime@ietf.org
>> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>> >>(non-roaming case)
>> >>
>> >>hi hannes,
>> >>
>> >> see inline,
>> >>
>> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig=20
>> >><Hannes.Tschofenig@gmx.net> wrote:
>> >>> Hi Julien,
>> >>>
>> >>> When we discussed this at the phone conference call (and the=20
>> >>> discussion is also captured in the meeting minutes) then=20
>I thought=20
>> >>> that the conclusion was to define a new Diameter application
>> >>for this exchange:
>> >>>
>> >>>
>> >>> =A0 Peer =A0 =A0 =A0 =A0 =A0 =A0 =A0 Authenticator =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Server
>> >>> =A0 =3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0=3D=3D=3D=3D=3D=3D
>> >>>
>> >>> =A0 =A0[<-- EAP-Initiate/ -----
>> >>> =A0 =A0 =A0 =A0Re-auth-Start]
>> >>> =A0 =A0[<-- EAP-Request/ ------
>> >>> =A0 =A0 =A0 =A0Identity]
>> >>>
>> >>>
>> >>> =A0 =A0---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>> >>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0Re-auth/
>> >>> =A0 =A0 =A0 =A0 [Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
>> >>>
>> >>> =A0 =A0<--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>> >>> =A0 =A0 =A0 =A0 =A0Re-auth/ =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
Re-auth/
>> >>> =A0 =A0 =A0 =A0[Bootstrap] =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0[Bootstrap])
>> >>>
>> >>> =A0 Note: [] brackets indicate optionality.
>> >>>
>> >>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Figure 2: ERP =
Exchange
>> >>>
>> >>> (The server in the figure above is the HOKEY server, a dedicated
>> >>> entity.)
>> >>>
>> >>>
>> >>> The initial EAP authentication is left untouched and, as Glen=20
>> >>> explained us, there is the assumption that the AAA entities work=20
>> >>> together with the HOKEY servers in a non-standardized way.
>> >>To me that sounded like a good plan.
>> >>>
>> >>> Does this make any sense?
>> >>
>> >> Taking into accounts that we have one app-id for Diameter EAP (I=20
>> >>would say NASREQ-EAP) AND soon another app-id for Diameter
>> >>MIP6 (which also use EAP for authentication). It certainly make=20
>> >>sense to not reuse the same App-ID for ERP if we want to=20
>use ERP for=20
>> >>the mip6 case.
>> >>
>> >> Let's see if others have opinion.
>> >>
>> >> Regards,
>> >>
>> >> Julien
>> >>
>> >>>
>> >>>
>> >>> The non-HOKEY expert
>> >>> Hannes
>> >>>
>> >>> PS: I never said that this is specific document is going to
>> >>be trivial
>> >>> :-)
>> >>>
>> >>>>-----Original Message-----
>> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>> Behalf
>> >>>>Of Julien Bournelle
>> >>>>Sent: 04 March, 2009 09:05
>> >>>>To: dime@ietf.org
>> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>> >>>>(non-roaming case)
>> >>>>
>> >>>>Hi all,
>> >>>>
>> >>>> we try to solve the issue concerning the need for a new
>> >>App-Id or not.
>> >>>>
>> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It=20
>> >>>>basically defines two new EAP codes and uses keying material
>> derived
>> >>>>from a first EAP authentication.
>> >>>>
>> >>>> To start the discussion, let's take the non-roaming case.
>> >>>>
>> >>>> In non-roaming, we have first an EAP authentication using=20
>> >>>>Diameter EAP.
>> >>>> Then, for reauthentication using ERP, we have two messages
>> >>>>(Request/Response) =A0between NAS and the AAA/ERP server carrying =

>> >>>>EAP packets
>> >>>>
>> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>> >>>>
>> >>>> So, either we reuse the Diameter EAP Application=20
>(DER/DEA) or we=20
>> >>>>define a new Diameter Application.
>> >>>>
>> >>>> If we use a new Diameter Application, a new Diameter
>> >>session will be
>> >>>>created and eventually a new Diameter server will be=20
>reached. What=20
>> >>>>bothers me in this case is that we basically perform a=20
>> >>>>reauthentication for the same session which is primarly
>> >>handled at the
>> >>>>AAA/EAP server. So, i'm wondering what happens concerning=20
>> >>>>Authorization Lifetime session etc..
>> >>>>
>> >>>> Note that I still don't have strong opinion and I'll be
>> >>glad to hear
>> >>>>opinions from others.
>> >>>>
>> >>>> Regards,
>> >>>>
>> >>>> Julien
>> >>>>_______________________________________________
>> >>>>DiME mailing list
>> >>>>DiME@ietf.org
>> >>>>https://www.ietf.org/mailman/listinfo/dime
>> >>>>
>> >>>
>> >>>
>> >>
>> >
>> >
>> _______________________________________________
>> DiME mailing list
>> DiME@ietf.org
>> https://www.ietf.org/mailman/listinfo/dime
>
>_______________________________________________
>HOKEY mailing list
>HOKEY@ietf.org
>https://www.ietf.org/mailman/listinfo/hokey
>


From nrs2712@gmail.com  Tue Mar 10 10:21:27 2009
Return-Path: <nrs2712@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 67CFF3A68FB for <dime@core3.amsl.com>; Tue, 10 Mar 2009 10:21:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.845
X-Spam-Level: 
X-Spam-Status: No, score=-0.845 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_BASE64_TEXT=1.753]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dFo4d3IaJT-N for <dime@core3.amsl.com>; Tue, 10 Mar 2009 10:21:26 -0700 (PDT)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.184]) by core3.amsl.com (Postfix) with ESMTP id 36E7E3A6898 for <dime@ietf.org>; Tue, 10 Mar 2009 10:21:26 -0700 (PDT)
Received: by nf-out-0910.google.com with SMTP id b11so362390nfh.39 for <dime@ietf.org>; Tue, 10 Mar 2009 10:22:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=H/TdH+Synbso/hSJrtDRJEUGWHuqIVdfgrwXM6K39jE=; b=vI4t+61VexDvhNed0xK1WJNgBDYMUtDMfB7N561MTEoSjiw0NEMxlKBkx7dWT+Y9ao WStLTpTvchgEdE5fpFMWGGAqfoCF2isLCAuRjnM/A3NA2wIwF9Gt6/oXswSyMcjUq2Z+ RzZvPEzZHb8KXtuS+u4YcOipuH+ukGBXEgG0I=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=fnGW2ZDbdq9GR/0/Q0Rtx18razzlmeiK/rXNTFod/jnY/uaeBNv36Dhx0YJkjrOLEJ 7b4CdcD5meGYYNNZEzz1Ipnm1HVGMvPhhvNRq+Ib6T7SwUyRhhaIwWY6/4fCUXqcOWCv C6uRu2oRY8897IILVBfK3lsKEW8MtxTxRBQ5k=
MIME-Version: 1.0
Received: by 10.216.35.69 with SMTP id t47mr2855452wea.221.1236705720457; Tue,  10 Mar 2009 10:22:00 -0700 (PDT)
Date: Tue, 10 Mar 2009 22:52:00 +0530
Message-ID: <1bdcf2860903101022j2567eb80p371136be3f3ea8b6@mail.gmail.com>
From: Ravi <nrs2712@gmail.com>
To: dime@ietf.org
Content-Type: multipart/alternative; boundary=0016367f9e5428dae20464c6fd27
Subject: [Dime] Route-Record in CCA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 17:22:18 -0000

--0016367f9e5428dae20464c6fd27
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi,
   As per RFC  4006, the CCA message has the following ABNF format

<Credit-Control-Answer> ::= < Diameter Header: 272, PXY >
                                  < Session-Id >
                                  { Result-Code }
                                  { Origin-Host }
                                  { Origin-Realm }
                                  { Auth-Application-Id }
                                  { CC-Request-Type }
                                  { CC-Request-Number }
                                  [ User-Name ]
                                  [ CC-Session-Failover ]
                                  [ CC-Sub-Session-Id ]
                                  [ Acct-Multi-Session-Id ]
                                  [ Origin-State-Id ]
                                  [ Event-Timestamp ]
                                  [ Granted-Service-Unit ]
                                 *[ Multiple-Services-Credit-Control ]
                                  [ Cost-Information]
                                  [ Final-Unit-Indication ]
                                  [ Check-Balance-Result ]
                                  [ Credit-Control-Failure-Handling ]
                                  [ Direct-Debiting-Failure-Handling ]
                                  [ Validity-Time]
                                 *[ Redirect-Host]
                                  [ Redirect-Host-Usage ]
                                  [ Redirect-Max-Cache-Time ]
                                 *[ Proxy-Info ]
                                 *[ Route-Record ]
                                 *[ Failed-AVP ]
                                 *[ AVP ]

What is the purpose of having Route-Record AVP in CCA message? What problem
does it solve? As far as I know, the route-record AVP can be present only in
requests.

--0016367f9e5428dae20464c6fd27
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: base64
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--0016367f9e5428dae20464c6fd27--

From agowda@starentnetworks.com  Tue Mar 10 11:00:35 2009
Return-Path: <agowda@starentnetworks.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1F6053A6C3C for <dime@core3.amsl.com>; Tue, 10 Mar 2009 11:00:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.983
X-Spam-Level: 
X-Spam-Status: No, score=-1.983 tagged_above=-999 required=5 tests=[AWL=0.614,  BAD_CREDIT=0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e6QAGEQp2DEQ for <dime@core3.amsl.com>; Tue, 10 Mar 2009 11:00:34 -0700 (PDT)
Received: from mx0.starentnetworks.com (mx0.starentnetworks.com [12.38.223.203]) by core3.amsl.com (Postfix) with ESMTP id 998443A6B51 for <dime@ietf.org>; Tue, 10 Mar 2009 11:00:33 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by mx0.starentnetworks.com (Postfix) with ESMTP id 4960890341 for <dime@ietf.org>; Tue, 10 Mar 2009 13:01:05 -0500 (EST)
Received: from mx0.starentnetworks.com ([127.0.0.1]) by localhost (mx0.starentnetworks.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19250-12 for <dime@ietf.org>; Tue, 10 Mar 2009 13:01:04 -0500 (EST)
Received: from exchtewks1.starentnetworks.com (exchtewks1.starentnetworks.com [10.2.4.28]) by mx0.starentnetworks.com (Postfix) with ESMTP for <dime@ietf.org>; Tue, 10 Mar 2009 13:01:04 -0500 (EST)
Received: from exchindia3.starentnetworks.com ([10.6.7.5]) by exchtewks1.starentnetworks.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 10 Mar 2009 14:01:04 -0400
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C9A1AA.2A685BB4"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Date: Tue, 10 Mar 2009 23:30:57 +0530
Message-ID: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com>
In-Reply-To: <1bdcf2860903101022j2567eb80p371136be3f3ea8b6@mail.gmail.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Route-Record in CCA
Thread-Index: AcmhpN4hkMHdXN4jRi+CIU+eZpILGQABK6mQ
References: <1bdcf2860903101022j2567eb80p371136be3f3ea8b6@mail.gmail.com>
From: "Gowda, Avinash" <agowda@starentnetworks.com>
To: "Ravi" <nrs2712@gmail.com>, <dime@ietf.org>
X-OriginalArrivalTime: 10 Mar 2009 18:01:04.0170 (UTC) FILETIME=[2DCD20A0:01C9A1AA]
X-Virus-Scanned: amavisd-new 2.2.1 (20041222) at mx0.starentnetworks.com
Subject: Re: [Dime] Route-Record in CCA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 18:00:35 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C9A1AA.2A685BB4
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Ravi,

=20

Following section in RFC 3588 will answer your question.

=20

2.10. Diameter Path Authorization

Similarly, the local Diameter agent, on receiving a Diameter response

authorizing a session, MUST check the Route-Record AVPs to make sure

that the route traversed by the response is acceptable. At each

step, forwarding of an authorization response is considered evidence

of a willingness to take on financial risk relative to the session.

A local realm may wish to limit this exposure, for example, by

establishing credit limits for intermediate realms and refusing to

accept responses which would violate those limits. By issuing an

accounting request corresponding to the authorization response, the

local realm implicitly indicates its agreement to provide the service

indicated in the authorization response. If the service cannot be

provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error

message MUST be sent within the accounting request; a Diameter client

receiving an authorization response for a service that it cannot

perform MUST NOT substitute an alternate service, and then send

accounting requests for the alternate service instead.

=20

Thanks,

Avinash Gowda

________________________________

From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
Ravi
Sent: Tuesday, March 10, 2009 10:52 PM
To: dime@ietf.org
Subject: [Dime] Route-Record in CCA

=20

Hi,

   As per RFC  4006, the CCA message has the following ABNF format

=20

<Credit-Control-Answer> ::=3D < Diameter Header: 272, PXY >

                                  < Session-Id >

                                  { Result-Code }

                                  { Origin-Host }

                                  { Origin-Realm }

                                  { Auth-Application-Id }

                                  { CC-Request-Type }

                                  { CC-Request-Number }

                                  [ User-Name ]

                                  [ CC-Session-Failover ]

                                  [ CC-Sub-Session-Id ]

                                  [ Acct-Multi-Session-Id ]

                                  [ Origin-State-Id ]

                                  [ Event-Timestamp ]

                                  [ Granted-Service-Unit ]

                                 *[ Multiple-Services-Credit-Control ]

                                  [ Cost-Information]

                                  [ Final-Unit-Indication ]

                                  [ Check-Balance-Result ]

                                  [ Credit-Control-Failure-Handling ]

                                  [ Direct-Debiting-Failure-Handling ]

                                  [ Validity-Time]

                                 *[ Redirect-Host]

                                  [ Redirect-Host-Usage ]

                                  [ Redirect-Max-Cache-Time ]

                                 *[ Proxy-Info ]

                                 *[ Route-Record ]

                                 *[ Failed-AVP ]

                                 *[ AVP ]

=20

What is the purpose of having Route-Record AVP in CCA message? What
problem does it solve? As far as I know, the route-record AVP can be
present only in requests.


------_=_NextPart_001_01C9A1AA.2A685BB4
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:x=3D"urn:schemas-microsoft-com:office:excel" =
xmlns:p=3D"urn:schemas-microsoft-com:office:powerpoint" =
xmlns:a=3D"urn:schemas-microsoft-com:office:access" =
xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" =
xmlns:s=3D"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" =
xmlns:rs=3D"urn:schemas-microsoft-com:rowset" xmlns:z=3D"#RowsetSchema" =
xmlns:b=3D"urn:schemas-microsoft-com:office:publisher" =
xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadsheet" =
xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" =
xmlns:odc=3D"urn:schemas-microsoft-com:office:odc" =
xmlns:oa=3D"urn:schemas-microsoft-com:office:activation" =
xmlns:html=3D"http://www.w3.org/TR/REC-html40" =
xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/" xmlns:D=3D"DAV:" =
xmlns:x2=3D"http://schemas.microsoft.com/office/excel/2003/xml" =
xmlns:ois=3D"http://schemas.microsoft.com/sharepoint/soap/ois/" =
xmlns:dir=3D"http://schemas.microsoft.com/sharepoint/soap/directory/" =
xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#" =
xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint/dsp" =
xmlns:udc=3D"http://schemas.microsoft.com/data/udc" =
xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema" =
xmlns:sub=3D"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/"=
 xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#" =
xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/" =
xmlns:sps=3D"http://schemas.microsoft.com/sharepoint/soap/" =
xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance" =
xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/soap" =
xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile" =
xmlns:udcp2p=3D"http://schemas.microsoft.com/data/udc/parttopart" =
xmlns:st=3D"&#1;" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
 namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" =
name=3D"place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Courier;
	panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Verdana;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:Verdana;
	color:blue;
	font-weight:normal;
	font-style:normal;
	text-decoration:none none;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'>Hi <st1:place =
w:st=3D"on">Ravi</st1:place>,<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'><o:p>&nbsp;</o:p></span></font></p=
>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'>Following section in RFC 3588 =
will
answer your question.<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'><o:p>&nbsp;</o:p></span></font></p=
>

<p class=3DMsoNormal><font size=3D2 face=3DCourier><span =
style=3D'font-size:10.0pt;
font-family:Courier'>2.10. Diameter Path =
Authorization<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>Similarly, the local =
Diameter
agent, on receiving a Diameter response<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>authorizing a session, =
MUST check
the Route-Record AVPs to make sure<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>that the route traversed =
by the
response is acceptable. At each<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>step, forwarding of an
authorization response is considered =
evidence<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>of a willingness to take =
on
financial risk relative to the session.<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>A local realm may wish to =
limit
this exposure, for example, by<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>establishing credit =
limits for
intermediate realms and refusing to<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>accept responses which =
would
violate those limits. By issuing an<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>accounting request =
corresponding
to the authorization response, the<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>local realm implicitly =
indicates
its agreement to provide the service<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>indicated in the =
authorization
response. If the service cannot be<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>provided by the local =
realm, then
a DIAMETER_UNABLE_TO_COMPLY error<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>message MUST be sent =
within the
accounting request; a Diameter client<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>receiving an =
authorization
response for a service that it cannot<o:p></o:p></span></font></p>

<p class=3DMsoNormal style=3D'text-autospace:none'><font size=3D2 =
face=3DCourier><span
style=3D'font-size:10.0pt;font-family:Courier'>perform MUST NOT =
substitute an
alternate service, and then send<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DCourier><span =
style=3D'font-size:10.0pt;
font-family:Courier'>accounting requests for the alternate service =
instead.</span></font><font
size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:10.0pt;font-family:Verdana;
color:blue'><o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'><o:p>&nbsp;</o:p></span></font></p=
>

<div>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'>Thanks,</span></font><font =
color=3Dblue><span
style=3D'color:blue'><o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 color=3Dblue face=3DVerdana><span =
style=3D'font-size:
10.0pt;font-family:Verdana;color:blue'>Avinash =
Gowda</span></font><o:p></o:p></p>

</div>

<div>

<div class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><font =
size=3D3
face=3D"Times New Roman"><span style=3D'font-size:12.0pt'>

<hr size=3D2 width=3D"100%" align=3Dcenter tabindex=3D-1>

</span></font></div>

<p class=3DMsoNormal><b><font size=3D2 face=3DTahoma><span =
style=3D'font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font =
size=3D2
face=3DTahoma><span style=3D'font-size:10.0pt;font-family:Tahoma'>
dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] <b><span =
style=3D'font-weight:
bold'>On Behalf Of </span></b><st1:place =
w:st=3D"on">Ravi</st1:place><br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Tuesday, March 10, =
2009
10:52 PM<br>
<b><span style=3D'font-weight:bold'>To:</span></b> dime@ietf.org<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> [Dime] =
Route-Record in
CCA</span></font><o:p></o:p></p>

</div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>Hi,<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; As per RFC &nbsp;4006, the CCA message has the =
following
ABNF format<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&lt;Credit-Control-Answer&gt; ::=3D &lt; Diameter Header: 272, =
PXY &gt;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&lt; Session-Id =
&gt;<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ Result-Code =
}<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ Origin-Host =
}<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ Origin-Realm =
}<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ =
Auth-Application-Id }<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ CC-Request-Type =
}<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;{ =
CC-Request-Number }<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ User-Name =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
CC-Session-Failover ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
CC-Sub-Session-Id ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Acct-Multi-Session-Id
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ Origin-State-Id =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ Event-Timestamp =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Granted-Service-Unit ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[
Multiple-Services-Credit-Control ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Cost-Information]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Final-Unit-Indication
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Check-Balance-Result ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[
Credit-Control-Failure-Handling ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[
Direct-Debiting-Failure-Handling ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Validity-Time]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[ =
Redirect-Host]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[ =
Redirect-Host-Usage ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;[
Redirect-Max-Cache-Time ]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[ Proxy-Info =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[ Route-Record =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[ Failed-AVP =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; *[ AVP =
]<o:p></o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

<div>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>What is the purpose of having Route-Record AVP in CCA message? =
What
problem does it solve? As far as I know, the route-record AVP can be =
present
only in requests.<o:p></o:p></span></font></p>

</div>

</div>

</body>

</html>

------_=_NextPart_001_01C9A1AA.2A685BB4--

From vfajardo@tari.toshiba.com  Tue Mar 10 12:28:49 2009
Return-Path: <vfajardo@tari.toshiba.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F9FC3A69B8 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 12:28:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.658
X-Spam-Level: 
X-Spam-Status: No, score=-2.658 tagged_above=-999 required=5 tests=[AWL=-0.058, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJe3SaB-2WWB for <dime@core3.amsl.com>; Tue, 10 Mar 2009 12:28:48 -0700 (PDT)
Received: from toshi17.tari.toshiba.com (unknown [IPv6:2001:418:1403:0:212:17ff:fe52:7811]) by core3.amsl.com (Postfix) with ESMTP id 54C403A6953 for <dime@ietf.org>; Tue, 10 Mar 2009 12:28:48 -0700 (PDT)
Received: from [127.0.0.1] (smtp.tari.toshiba.com [172.30.24.10]) by toshi17.tari.toshiba.com (8.13.1/8.13.1) with ESMTP id n2AJOF1a076606; Tue, 10 Mar 2009 14:24:15 -0500 (EST) (envelope-from vfajardo@tari.toshiba.com)
Message-ID: <49B6BF92.7070907@tari.toshiba.com>
Date: Tue, 10 Mar 2009 15:29:22 -0400
From: Victor Fajardo <vfajardo@tari.toshiba.com>
User-Agent: Mozilla-Thunderbird 2.0.0.19 (X11/20090103)
MIME-Version: 1.0
To: Jan Engelhardt <jengelh@medozas.de>
References: <alpine.LSU.2.00.0903100419470.23658@fbirervta.pbzchgretzou.qr> <49B66B91.4000605@tari.toshiba.com> <alpine.LSU.2.00.0903101610300.19523@fbirervta.pbzchgretzou.qr>
In-Reply-To: <alpine.LSU.2.00.0903101610300.19523@fbirervta.pbzchgretzou.qr>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Remarks/Inquiries about rfc3588bis16 changes
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 19:28:49 -0000

Hi Jan,

> On Tuesday 2009-03-10 14:30, Victor Fajardo wrote:
>   
>>> |page 11
>>> |
>>> |Deprecated the exchange of CER/CEA message in the open state.
>>>
>>> What would happen if such an exchange in the open state produces no common
>>> applications -- terminate connection, or remain in the open state?
>>>       
>> In this version of the base protocol, it is not expected that CER/CEA will be
>> exchanged in the open state. It is one of the features in bis (diameter v2)
>> that is not very backward compatible. Though a separate solution is in the
>> works.
>>     
>
> Well the question (two actually) is: how was this handled in v1? And:
>   

It is not explicitly handled in v1 (rfc3588).

> Consider the case where a broken v2 peer, or malicious v2 peer, issues
> a CER in the open state to another v2, and what the non-evil peer should
> be doing to keep security straight.
>   

that maybe a matter of policy. just like receiving any message that a 
node is not expecting. but we can always include provision in bis 
specifically for CER in v2 that disconnection is recommended in this case.

>   
>>> |page 46
>>> |
>>> |	DiameterIdentity = FQDN/Realm
>>>
>>> Here, DiameterIdentity changed from FQDN to FQDN/Realm. One AVP where
>>> DiameterIdentity is used is Origin-Host. However, since there is already an
>>> AVP Origin-Realm which contais the realm, is it really necessary to add the
>>> realm again, to Origin-Host?
>>>       
>> Hmm... the expansion of the context of DiameterIdentity does not include an
>> assumption that concatenation of Origin-Host and Origin-Realm would form an
>> FQDN. It is probably cleanest to keep Origin-Host as it is since there maybe
>> future use cases where Origin-Host is re-used by itself, i.e. without any other
>> realm avp accompanying it.
>>     
>
> Let me reword it: Should I append whatever has been determined to be
> the value of Origin-Realm to the FQDN to obtain the DiameterIdentity
> for Origin-Host when a peer creates new messages?
>   

short answer is no. there is no assumption such as this in diameter AFAIK.

>   
>>> |-11.5. Diameter TCP/SCTP and TLS Port Numbers
>>> |+11.5. Diameter TCP, SCTP and TLS/TCP Port Numbers
>>>
>>> The TLS/TCP port number should then also be assigned for TLS/SCTP.
>>>       
>> The new security changes does not support TLS/SCTP. We can clarify this.
>>     
>
> May I ask why it is that TLS over (single-substream) SCTP is not 
> supported/specified?
>   

After two(2) diameter bake-offs and many years of on-and-off discussion 
... it would seem that SCTP support was never really "popular" in 
diameter implementations so it was decided that adding TLS/SCTP does not 
seem useful.


regards,
victor


From jouni.nospam@gmail.com  Tue Mar 10 15:37:38 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BEAE83A69DC for <dime@core3.amsl.com>; Tue, 10 Mar 2009 15:37:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aHZnTZe2N4GN for <dime@core3.amsl.com>; Tue, 10 Mar 2009 15:37:37 -0700 (PDT)
Received: from gw03.mail.saunalahti.fi (gw03.mail.saunalahti.fi [195.197.172.111]) by core3.amsl.com (Postfix) with ESMTP id E73153A6844 for <dime@ietf.org>; Tue, 10 Mar 2009 15:37:36 -0700 (PDT)
Received: from a88-112-142-35.elisa-laajakaista.fi (a88-112-142-35.elisa-laajakaista.fi [88.112.142.35]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by gw03.mail.saunalahti.fi (Postfix) with ESMTP id 9CEAB216756; Wed, 11 Mar 2009 00:38:03 +0200 (EET)
Message-Id: <AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com>
From: jouni <jouni.nospam@gmail.com>
To: Avi Lior <avi@bridgewatersystems.com>
In-Reply-To: <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Wed, 11 Mar 2009 00:38:03 +0200
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com> <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com> <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com>
X-Mailer: Apple Mail (2.930.3)
Cc: "dime@ietf.org" <dime@ietf.org>, Mark Jones <Mark.Jones@bridgewatersystems.com>, "Lionel.morand@orange-ftgroup.com" <Lionel.morand@orange-ftgroup.com>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2009 22:37:38 -0000

Hi Avi,

Thanks for the valuable input. See some comments inline.

On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:

> I have inline comments as well as new comment:
>
> The over arching problem as I see it is that when you read the  
> document, at least the introduction and abstract you get the sense  
> that the draft is intending to fix base diameter behavior.

That is the intent.

>
> But in responses I get, I get the feeling that the intent is really  
> to have an Application based routing scheme using NAI.
>

Applications are recommended for cases where the requests pass through  
realms/networks where one cannot always claim that "all my agents  
implement RFC3588 + RFC-NAI-Routing". If you know that your networks  
support RFC3588 + RFC-NAI-Routing, there is no need to go for a new  
application. Section 4.3 is a recommendation for backwards  
compatibility.


>
> If you are trying to fix base then we need a robust backwards  
> compatible way of doing things.  As well, we can argue whether or  
> not it should be placed in DIME.  There is more work to do.

We at least seem to agree that something needs to be done ;)

>
> If you are trying to write a document that describes how one would  
> do Application routing using NAI. Then that does not belong in base  
> so we should stop debating that.  And actually in this case what you  
> are doing is fine and you are probably there.
>
> So which is it?  And once we pick we should be clear in the text.

Definitely this is not about doing only application routing using NAI.  
One of the goals is to be able to request a vendor e.g. "give me an  
agent that implements RFC3588/RFC-NAI-Routing", without being more  
specific on applications.

I reread Sections 4.1-4.2. Which parts are unclear? I am happy to  
reword.

>
> We could come up with a hybrid solution by the way.
>
> If the priority is to make sure that the packet gets to the  
> destination, then:
> You set the destination-realm to the final destination and  
> intermediaries that support decorated NAI use the decorated NAI  
> without modification to the destination-realm.  Intermediaries that  
> don't know about decorated NAI will just perform the destination- 
> realm routing.  As you point out you get looping but its not  
> infinite looping.  At least the message would get to the final  
> destination.

The agent would send an error indicating a routing loop and then the  
agent MAY try an alternate route.. which would result another routing  
loop. I see no way out of this.

>
>
> If NAI routing is the most important thing then you set the  
> destination-realm to the next hop of the Decorated NAI.  Each hop  
> that supports this scheme will use the decorated-nai and will update  
> the realm.  If a hop is reached that does not understand decorated  
> NAI then the packet will be consumed locally.
>
>
>
> Please see inline for more comments
>
>> -----Original Message-----
>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
>> Sent: March 3, 2009 5:44 PM
>> To: Avi Lior
>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;
>> tena@huawei.com; Hannes.Tschofenig@gmx.net; dime@ietf.org
>> Subject: Re: Dime NAI Routing
>>
>> Hi Avi,
>>
>> Thanks for reading & commenting the I-D.
>>
>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
>>
>>> A couple of comments:
>>>
>>> 1)  The draft should mention something about the presence of
>>> Destination-Host AVP.
>>>
>>> The rule for routing is that the Destination-Host AVP is
>> not looked at
>>> until the message reaches the terminal realm as determined by the
>>> decorated NAI.
>>
>> Where you would suggest to include the clarifying text? In
>> Section 4.2.?
>
> I don't know.  I will have to look at the draft. This is really a  
> side issue and depends on the intent of the draft.

Ok.

>
>
>>
>>
>>> 2) I dont like the way Destination-Realm is being used.
>>>
>>> The draft states that the destination realm is updated on a
>> hop by hop
>>> basis together with the decorated NAI.
>>
>> I assume that is the only way to ensure the request message
>> really goes through all wanted realms.
>
> Correct.  And in some cases NAI routing is going to be more  
> important and in some cases it will be more important to make sure  
> the message makes it all the way.
>
>>
>>> If an intermediary is not compliant with the scheme
>> presented by this
>>> draft it will result in the intermediary consuming the
>> message locally
>>> - since the message contains the destination realm equal to
>>> its realm.   Thus the message is not going to reach the destination.
>>
>> That is the reason why the I-D suggests only using the
>> decoration stuff with a new application that is known to
>> support this I-D. In that way legacy agents can be bypassed.
>
> Okay so here you are clear this is Application based routing.

This is suggested/recommended only when there is no guarantee that all  
agents implement the NAI routing. To my understanding all Diameter  
routing is based on applications + realms anyway, so I don't see the  
problem.

>
>>>
>>> Instead, I propose that the destination realm should be
>> always set to
>>> the terminal realm, thus:
>>>
>>> Agents that are compliant with the draft will first look at
>> the NAI to
>>> determine whether the packet has reached the terminal realm
>> or where
>>> it should be routed next;
>>
>> Are you proposing to make the routing decision based on the
>> User-Name (and ignore the Destination-Realm all together) in
>> cases where 1) the agent supports this I-D and 2) the
>> User-Name contains a decorated NAI?
>> Once the decorated NAI would have been "consumed" the
>> checking would be based on the Destination-Realm again..?
>
> Almost. In the case where you want to guarantee packet delivery  
> irrespective of whether nodes are compliant with this draft, then  
> you set the destination-realm to the final destination of the  
> decorated NAI.  Agents that support your scheme would use the  
> decorated NAI to determine how to route to the next hop.  Agents  
> that don't support your scheme will use the destination-realm to  
> determine how to route to the next hop (they will ignore the  
> decorated NAI).

Ok. That was close enough to my understanding ;) So, the route  
decision would be:

1) case NAI routing supported:
    route decision: User-Name + Application
    if User-Name's @realm matches agent's own realm, precess the NAI

2) case normal RFC3588
    route decision: Destination-Realm + Application
    Modify: none

right?


>
>
>>> Agents that are not compatible with the draft will use the
>> old rules
>>> for routing and would route the message according to the
>> destination-
>>> realm only and thus the message will reach the final destintaion
>>> albeit not necessarily according to the decorated NAI. But
>> at least it
>>> would work.
>>>
>>>
>>> Did I miss anything?
>>
>> What happens if.. the route happens to have some
>> non-compliant agents and when the request reaches its final
>> end (e.g. according to the inter-connection architecture) the
>> User-Name still has decorated NAI?
>> Would the decorated NAI compliant server/proxy send to
>> request back to some other realm pointed by the User-name?
>> This would effectively cause a routing loop, right?
> No. It may cause a loop but it wont be an infinite loop.  So it  
> depends, in some cases I may be okay with have strange routing but I  
> will at least get the packet there. So it depends what I want to  
> achieve.

There is no guarantee that the alternate route selected by the agent  
that discovered the loop would result to any better outcome. The  
alternate route could again route traffic back.

Cheers,
	Jouni

>
>
>>
>> Cheers,
>>        Jouni
>>
>>
>>
>>>
>>>
>>
>>


From rajithr@huawei.com  Tue Mar 10 21:42:22 2009
Return-Path: <rajithr@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F8F43A6996 for <dime@core3.amsl.com>; Tue, 10 Mar 2009 21:42:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAD_CREDIT=0.001, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcWXb-gpznvU for <dime@core3.amsl.com>; Tue, 10 Mar 2009 21:42:21 -0700 (PDT)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 2B3373A694A for <dime@ietf.org>; Tue, 10 Mar 2009 21:42:21 -0700 (PDT)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGB004P9RRIZ9@szxga04-in.huawei.com> for dime@ietf.org; Wed, 11 Mar 2009 12:42:54 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGB00NO4RRI4L@szxga04-in.huawei.com> for dime@ietf.org; Wed, 11 Mar 2009 12:42:54 +0800 (CST)
Received: from HTIPL01390 ([10.18.28.71]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGB00CI9RRD89@szxml05-in.huawei.com> for dime@ietf.org; Wed, 11 Mar 2009 12:42:54 +0800 (CST)
Date: Wed, 11 Mar 2009 10:12:49 +0530
From: Rajith R <rajithr@huawei.com>
In-reply-to: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com>
To: "'Gowda, Avinash'" <agowda@starentnetworks.com>, 'Ravi' <nrs2712@gmail.com>, dime@ietf.org
Message-id: <000001c9a203$d546ac30$471c120a@china.huawei.com>
Organization: Htipl
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: quoted-printable
Thread-index: AcmhpN4hkMHdXN4jRi+CIU+eZpILGQABK6mQABY489A=
Subject: Re: [Dime] Route-Record in CCA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: rajithr@huawei.com
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2009 04:42:22 -0000

IMHO, checking the Route-Record AVPs in response and deciding whether =
the
route is acceptable is needless b/c response path is same as request =
path
and server is anyways provisioned for checking the request path. Hence, =
no
need to have Route-Record AVP in responses.

The -bis draft probably shares this view & hence has removed this text.

Regards

Rajith


________________________________________
From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
Gowda, Avinash
Sent: Tuesday, March 10, 2009 11:31 PM
To: Ravi; dime@ietf.org
Subject: Re: [Dime] Route-Record in CCA

Hi Ravi,

Following section in RFC 3588 will answer your question.

2.10. Diameter Path Authorization
Similarly, the local Diameter agent, on receiving a Diameter response
authorizing a session, MUST check the Route-Record AVPs to make sure
that the route traversed by the response is acceptable. At each
step, forwarding of an authorization response is considered evidence
of a willingness to take on financial risk relative to the session.
A local realm may wish to limit this exposure, for example, by
establishing credit limits for intermediate realms and refusing to
accept responses which would violate those limits. By issuing an
accounting request corresponding to the authorization response, the
local realm implicitly indicates its agreement to provide the service
indicated in the authorization response. If the service cannot be
provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
message MUST be sent within the accounting request; a Diameter client
receiving an authorization response for a service that it cannot
perform MUST NOT substitute an alternate service, and then send
accounting requests for the alternate service instead.

Thanks,
Avinash Gowda
________________________________________
From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of =
Ravi
Sent: Tuesday, March 10, 2009 10:52 PM
To: dime@ietf.org
Subject: [Dime] Route-Record in CCA

Hi,
=A0=A0 As per RFC =A04006, the CCA message has the following ABNF format

<Credit-Control-Answer> ::=3D < Diameter Header: 272, PXY >
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0< =
Session-Id >
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
Result-Code }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
Origin-Host }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
Origin-Realm }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
Auth-Application-Id }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
CC-Request-Type }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ =
CC-Request-Number }
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
User-Name ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
CC-Session-Failover ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
CC-Sub-Session-Id ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Acct-Multi-Session-Id ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Origin-State-Id ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Event-Timestamp ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Granted-Service-Unit ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
Multiple-Services-Credit-Control ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Cost-Information]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Final-Unit-Indication ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Check-Balance-Result ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Credit-Control-Failure-Handling ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Direct-Debiting-Failure-Handling ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Validity-Time]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
Redirect-Host]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Redirect-Host-Usage ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ =
Redirect-Max-Cache-Time ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
Proxy-Info ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
Route-Record ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
Failed-AVP ]
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ =
AVP ]

What is the purpose of having Route-Record AVP in CCA message? What =
problem
does it solve? As far as I know, the route-record AVP can be present =
only in
requests.



From nrs2712@gmail.com  Wed Mar 11 11:04:26 2009
Return-Path: <nrs2712@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ACEDA3A6B9E for <dime@core3.amsl.com>; Wed, 11 Mar 2009 11:04:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.721
X-Spam-Level: 
X-Spam-Status: No, score=-1.721 tagged_above=-999 required=5 tests=[AWL=0.876,  BAD_CREDIT=0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id maZIjqz3lNtv for <dime@core3.amsl.com>; Wed, 11 Mar 2009 11:04:21 -0700 (PDT)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.188]) by core3.amsl.com (Postfix) with ESMTP id CB3E53A684C for <dime@ietf.org>; Wed, 11 Mar 2009 11:04:20 -0700 (PDT)
Received: by nf-out-0910.google.com with SMTP id b11so29777nfh.39 for <dime@ietf.org>; Wed, 11 Mar 2009 11:04:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=USZn15B/aZl3ObXHlCnScSj4UTRykPbHqfSWTxzqMms=; b=rLhhJ5JbVB4FQFQI4lxt2xXSVizrGDDvDRavdVoOY9ly5DZV2p9b0h28PK3c3fdXtr vzZUmChBVpZ4Hf3vuhzVtmi2I/aBVyDEdIodfQY9SWX/zxplJ8HxNsrxl37GaSOgM8ap wtp6ckkWTLhElS+4BOPcRTlxQurC4JiN1eLcg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=S3Z+bIhxfW3J8eVkRgsUfLDYhxYZ8lCDLl4S451qu8bUz0wmO7ALMQCCC+tNHA20Bb HPXcTHpXVgLpdUqnKhb5jA0pfN6hqBUTpmOAkVbLSOLikuTlvW9hQ0a0lW2kyqL9bVpj P0irTbFYIEl4JsoiGPcHmgh2M7kGTEKQ7Tqs8=
MIME-Version: 1.0
Received: by 10.216.2.207 with SMTP id 57mr3567034wef.174.1236794696177; Wed,  11 Mar 2009 11:04:56 -0700 (PDT)
In-Reply-To: <000001c9a203$d546ac30$471c120a@china.huawei.com>
References: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com> <000001c9a203$d546ac30$471c120a@china.huawei.com>
Date: Wed, 11 Mar 2009 23:34:55 +0530
Message-ID: <1bdcf2860903111104x1124c9c9j9e2e1ee55c18e662@mail.gmail.com>
From: Ravi <nrs2712@gmail.com>
To: rajithr@huawei.com
Content-Type: multipart/alternative; boundary=0016364c7d9d8699230464dbb473
Cc: dime@ietf.org
Subject: Re: [Dime] Route-Record in CCA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Mar 2009 18:04:26 -0000

--0016364c7d9d8699230464dbb473
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Even I had the same opinion that Route-Record need not be present in
the answer messages.

Then how do I explain this text from the bis 16.

"  A local realm may wish to limit this exposure, for example, by
   establishing credit limits for intermediate realms and refusing to
   accept responses which would violate those limits.  By issuing an
   accounting request corresponding to the authorization response, the
   local realm implicitly indicates its agreement to provide the service
   indicated in the authorization response.  If the service cannot be
   provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
   message MUST be sent within the accounting request;"


If a local realm agent/node needs to refuse a response which traverses
intermediate realms, it needs to know the path the request has
traversed. How would the local node know that? Is this done using
Route-Record? Then should we not update section 6.2 "Diameter Answer
Processing" to say that server needs to add the Route-Record AVPs from
the request to the answer?


Another question on the same section....

"If the service cannot be provided by the local realm, then a
DIAMETER_UNABLE_TO_COMPLY error message MUST be sent within the
accounting request"

How is this done? Another AVP?


On Wed, Mar 11, 2009 at 10:12 AM, Rajith R <rajithr@huawei.com> wrote:

> IMHO, checking the Route-Record AVPs in response and deciding whether the
> route is acceptable is needless b/c response path is same as request path
> and server is anyways provisioned for checking the request path. Hence, no
> need to have Route-Record AVP in responses.
>
> The -bis draft probably shares this view & hence has removed this text.
>
> Regards
>
> Rajith
>
>
> ________________________________________
> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
> Gowda, Avinash
> Sent: Tuesday, March 10, 2009 11:31 PM
> To: Ravi; dime@ietf.org
> Subject: Re: [Dime] Route-Record in CCA
>
> Hi Ravi,
>
> Following section in RFC 3588 will answer your question.
>
> 2.10. Diameter Path Authorization
> Similarly, the local Diameter agent, on receiving a Diameter response
> authorizing a session, MUST check the Route-Record AVPs to make sure
> that the route traversed by the response is acceptable. At each
> step, forwarding of an authorization response is considered evidence
> of a willingness to take on financial risk relative to the session.
> A local realm may wish to limit this exposure, for example, by
> establishing credit limits for intermediate realms and refusing to
> accept responses which would violate those limits. By issuing an
> accounting request corresponding to the authorization response, the
> local realm implicitly indicates its agreement to provide the service
> indicated in the authorization response. If the service cannot be
> provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
> message MUST be sent within the accounting request; a Diameter client
> receiving an authorization response for a service that it cannot
> perform MUST NOT substitute an alternate service, and then send
> accounting requests for the alternate service instead.
>
> Thanks,
> Avinash Gowda
> ________________________________________
> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
> Ravi
> Sent: Tuesday, March 10, 2009 10:52 PM
> To: dime@ietf.org
> Subject: [Dime] Route-Record in CCA
>
> Hi,
>    As per RFC  4006, the CCA message has the following ABNF format
>
> <Credit-Control-Answer> ::= < Diameter Header: 272, PXY >
>                                   < Session-Id >
>                                   { Result-Code }
>                                   { Origin-Host }
>                                   { Origin-Realm }
>                                   { Auth-Application-Id }
>                                   { CC-Request-Type }
>                                   { CC-Request-Number }
>                                   [ User-Name ]
>                                   [ CC-Session-Failover ]
>                                   [ CC-Sub-Session-Id ]
>                                   [ Acct-Multi-Session-Id ]
>                                   [ Origin-State-Id ]
>                                   [ Event-Timestamp ]
>                                   [ Granted-Service-Unit ]
>                                  *[ Multiple-Services-Credit-Control ]
>                                   [ Cost-Information]
>                                   [ Final-Unit-Indication ]
>                                   [ Check-Balance-Result ]
>                                   [ Credit-Control-Failure-Handling ]
>                                   [ Direct-Debiting-Failure-Handling ]
>                                   [ Validity-Time]
>                                  *[ Redirect-Host]
>                                   [ Redirect-Host-Usage ]
>                                   [ Redirect-Max-Cache-Time ]
>                                  *[ Proxy-Info ]
>                                  *[ Route-Record ]
>                                  *[ Failed-AVP ]
>                                  *[ AVP ]
>
> What is the purpose of having Route-Record AVP in CCA message? What problem
> does it solve? As far as I know, the route-record AVP can be present only
> in
> requests.
>
>
>

--0016364c7d9d8699230464dbb473
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<span class=3D"Apple-style-span" style=3D"font-family: &#39;times new roman=
&#39;; font-size: 16px; "><pre style=3D"word-wrap: break-word; white-space:=
 pre-wrap; ">Even I had the same opinion that Route-Record need not be pres=
ent in the answer messages.</pre>
<pre style=3D"word-wrap: break-word; white-space: pre-wrap; ">Then how do I=
 explain this text from the bis 16.</pre><pre style=3D"word-wrap: break-wor=
d; white-space: pre-wrap; ">&quot;  A local realm may wish to limit this ex=
posure, for example, by
   establishing credit limits for intermediate realms and refusing to
   accept responses which would violate those limits.  By issuing an
   accounting request corresponding to the authorization response, the
   local realm implicitly indicates its agreement to provide the service
   indicated in the authorization response.  If the service cannot be
   provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
   message MUST be sent within the accounting request;&quot;</pre><pre styl=
e=3D"word-wrap: break-word; white-space: pre-wrap; "><br></pre><pre style=
=3D"word-wrap: break-word; white-space: pre-wrap; ">If a local realm agent/=
node needs to refuse a response which traverses intermediate realms, it nee=
ds to know the path the request has traversed. How would the local node kno=
w that? Is this done using Route-Record? Then should we not update section =
6.2 &quot;Diameter Answer Processing&quot; to say that server needs to add =
the Route-Record AVPs from the request to the answer?</pre>
<pre style=3D"word-wrap: break-word; white-space: pre-wrap; "><span class=
=3D"Apple-style-span" style=3D"font-family: &#39;times new roman&#39;; whit=
e-space: normal; "><pre style=3D"word-wrap: break-word; white-space: pre-wr=
ap; ">
<br></pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; ">Ano=
ther question on the same section....</pre></span></pre><pre style=3D"word-=
wrap: break-word; white-space: pre-wrap; "><span class=3D"Apple-style-span"=
 style=3D"font-family: &#39;times new roman&#39;; white-space: normal; "><p=
re style=3D"word-wrap: break-word; white-space: pre-wrap; ">
&quot;If the service cannot be provided by the local realm, then a DIAMETER=
_UNABLE_TO_COMPLY error message MUST be sent within the accounting request&=
quot;</pre></span></pre><pre style=3D"word-wrap: break-word; white-space: p=
re-wrap; ">
How is this done? Another AVP?</pre></span><br><div class=3D"gmail_quote">O=
n Wed, Mar 11, 2009 at 10:12 AM, Rajith R <span dir=3D"ltr">&lt;<a href=3D"=
mailto:rajithr@huawei.com">rajithr@huawei.com</a>&gt;</span> wrote:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=
cc solid;padding-left:1ex;">
IMHO, checking the Route-Record AVPs in response and deciding whether the<b=
r>
route is acceptable is needless b/c response path is same as request path<b=
r>
and server is anyways provisioned for checking the request path. Hence, no<=
br>
need to have Route-Record AVP in responses.<br>
<br>
The -bis draft probably shares this view &amp; hence has removed this text.=
<br>
<br>
Regards<br>
<br>
Rajith<br>
<br>
<br>
________________________________________<br>
<div class=3D"im">From: <a href=3D"mailto:dime-bounces@ietf.org">dime-bounc=
es@ietf.org</a> [mailto:<a href=3D"mailto:dime-bounces@ietf.org">dime-bounc=
es@ietf.org</a>] On Behalf Of<br>
</div>Gowda, Avinash<br>
Sent: Tuesday, March 10, 2009 11:31 PM<br>
To: Ravi; <a href=3D"mailto:dime@ietf.org">dime@ietf.org</a><br>
Subject: Re: [Dime] Route-Record in CCA<br>
<div><div></div><div class=3D"h5"><br>
Hi Ravi,<br>
<br>
Following section in RFC 3588 will answer your question.<br>
<br>
2.10. Diameter Path Authorization<br>
Similarly, the local Diameter agent, on receiving a Diameter response<br>
authorizing a session, MUST check the Route-Record AVPs to make sure<br>
that the route traversed by the response is acceptable. At each<br>
step, forwarding of an authorization response is considered evidence<br>
of a willingness to take on financial risk relative to the session.<br>
A local realm may wish to limit this exposure, for example, by<br>
establishing credit limits for intermediate realms and refusing to<br>
accept responses which would violate those limits. By issuing an<br>
accounting request corresponding to the authorization response, the<br>
local realm implicitly indicates its agreement to provide the service<br>
indicated in the authorization response. If the service cannot be<br>
provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error<br>
message MUST be sent within the accounting request; a Diameter client<br>
receiving an authorization response for a service that it cannot<br>
perform MUST NOT substitute an alternate service, and then send<br>
accounting requests for the alternate service instead.<br>
<br>
Thanks,<br>
Avinash Gowda<br>
________________________________________<br>
From: <a href=3D"mailto:dime-bounces@ietf.org">dime-bounces@ietf.org</a> [m=
ailto:<a href=3D"mailto:dime-bounces@ietf.org">dime-bounces@ietf.org</a>] O=
n Behalf Of Ravi<br>
Sent: Tuesday, March 10, 2009 10:52 PM<br>
To: <a href=3D"mailto:dime@ietf.org">dime@ietf.org</a><br>
Subject: [Dime] Route-Record in CCA<br>
<br>
Hi,<br>
=A0=A0 As per RFC =A04006, the CCA message has the following ABNF format<br=
>
<br>
&lt;Credit-Control-Answer&gt; ::=3D &lt; Diameter Header: 272, PXY &gt;<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0&lt; =
Session-Id &gt;<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Res=
ult-Code }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Ori=
gin-Host }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Ori=
gin-Realm }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Aut=
h-Application-Id }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ CC-=
Request-Type }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ CC-=
Request-Number }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Use=
r-Name ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ CC-=
Session-Failover ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ CC-=
Sub-Session-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Acc=
t-Multi-Session-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Ori=
gin-State-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Eve=
nt-Timestamp ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Gra=
nted-Service-Unit ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Multi=
ple-Services-Credit-Control ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Cos=
t-Information]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Fin=
al-Unit-Indication ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Che=
ck-Balance-Result ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Cre=
dit-Control-Failure-Handling ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Dir=
ect-Debiting-Failure-Handling ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Val=
idity-Time]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Redir=
ect-Host]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Red=
irect-Host-Usage ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Red=
irect-Max-Cache-Time ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Proxy=
-Info ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Route=
-Record ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Faile=
d-AVP ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ AVP ]=
<br>
<br>
What is the purpose of having Route-Record AVP in CCA message? What problem=
<br>
does it solve? As far as I know, the route-record AVP can be present only i=
n<br>
requests.<br>
<br>
<br>
</div></div></blockquote></div><br>

--0016364c7d9d8699230464dbb473--

From Hannes.Tschofenig@gmx.net  Wed Mar 11 23:53:03 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8EFFD3A67B6 for <dime@core3.amsl.com>; Wed, 11 Mar 2009 23:53:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.437
X-Spam-Level: 
X-Spam-Status: No, score=-1.437 tagged_above=-999 required=5 tests=[AWL=-0.697, BAYES_20=-0.74]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADPvYs1x4cjY for <dime@core3.amsl.com>; Wed, 11 Mar 2009 23:53:03 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 6AF543A63EC for <dime@ietf.org>; Wed, 11 Mar 2009 23:53:01 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 06:53:38 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp061) with SMTP; 12 Mar 2009 07:53:38 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1+T/QUeeVWTDVm6mBdgQReWVwMJwqgGl6kdJ6sYi5 hKdHNvhmI0qHVC
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dime@ietf.org>
Date: Thu, 12 Mar 2009 08:54:43 +0200
Message-ID: <093e01c9a2df$6d3d9950$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Acmi32wWq9aMxadcTamepC9WEqvV4Q==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.78
Subject: [Dime] draft-ietf-dime-erp-00.txt
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 06:53:03 -0000

In a discussion with Julien I stressed the importance of having a strawman
proposal ready for the IETF meeting. 
Julien promised me that they will be working on a document that we can look
at. 

At the DIME meeting we will have to make a decision on high level direction
we should be going (and confirm it on the list later on). I certainly don't
want to change our direction every half year, as we did it with some other
documents. 

Ciao
Hannes


From sunseawq@huawei.com  Thu Mar 12 00:51:18 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2FAE43A6A3E; Thu, 12 Mar 2009 00:51:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.465
X-Spam-Level: 
X-Spam-Status: No, score=-1.465 tagged_above=-999 required=5 tests=[AWL=1.134,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wgGmB2Sz7tMV; Thu, 12 Mar 2009 00:51:16 -0700 (PDT)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 3A6413A68AB; Thu, 12 Mar 2009 00:51:16 -0700 (PDT)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGD005BNV6EH5@szxga04-in.huawei.com>; Thu, 12 Mar 2009 15:51:50 +0800 (CST)
Received: from huawei.com ([172.24.1.33]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGD00GP3V6EI9@szxga04-in.huawei.com>; Thu, 12 Mar 2009 15:51:50 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGD00HKDV6DOV@szxml06-in.huawei.com>; Thu, 12 Mar 2009 15:51:50 +0800 (CST)
Date: Thu, 12 Mar 2009 15:51:49 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>, 'Glen Zorn' <glenzorn@comcast.net>, 'Julien Bournelle' <julien.bournelle@gmail.com>
Message-id: <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not	?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 07:51:18 -0000

Hi:
I am glad to see the further work associated with RFC5296 has been developed well in the Diameter working group.
As regarding whether to define a new Diameter application for ERP,  I would like to ask a question first:
As we know, the normal authentication is quite different from Re-authentication. Re-authentication is usually applicable for the inter-authenticator handover scenarios. However, leave the inter-authenticator handover scenarios aside, when the existing keying materials are expired on the serving authenticator associated with the peer, which authentication mechanisms will be used to renew the lifetime of existing keying materials, normal authentication or Re-authentication?
If the answer is both, how to distinguish between them?
If the answer is normal authentication, I would like to support defining new Diameter application for ERP.

Best Regards!

-Qin
----- Original Message ----- 
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Glen Zorn'" <glenzorn@comcast.net>; "'Julien Bournelle'" <julien.bournelle@gmail.com>
Cc: <dime@ietf.org>; <hokey@ietf.org>
Sent: Wednesday, March 11, 2009 12:57 AM
Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roaming case)


To quickly summarize for HOKEY WG members: 

We are currently trying to make the main design assumptions for the Diameter
ERP work and we are currently leaning towards defining a new Diameter
application for ERP that builds on top of Diameter EAP and makes use of the
MIPv6 bootstrapping AVPs we have defined in
draft-ietf-dime-mip6-split-16.txt.

If you have an opinion about the Diameter ERP design please let us know
ASAP. We would like to cast these things in stone pretty quickly.
If you are planning to write code then drop us a note. 

Ciao
Hannes

>-----Original Message-----
>From: hokey-bounces@ietf.org [mailto:hokey-bounces@ietf.org] 
>On Behalf Of Glen Zorn
>Sent: 10 March, 2009 18:38
>To: 'Julien Bournelle'; 'Hannes Tschofenig'
>Cc: dime@ietf.org; hokey@ietf.org
>Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or 
>not ?(non-roaming case)
>
>Can we include the hokey WG in this discussion, please?
>
>> -----Original Message-----
>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf 
>> Of Julien Bournelle
>> Sent: Tuesday, March 10, 2009 3:14 AM
>> To: Hannes Tschofenig
>> Cc: dime@ietf.org
>> Subject: Re: [Dime] DiME ERP: new Application ID or not ? 
>(non-roaming
>> case)
>> 
>> Hi hannes,
>> 
>> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig 
>> <Hannes.Tschofenig@gmx.net> wrote:
>> > I also have to add ...
>> >
>> > If you define a new Diameter Application ID then you have to decide
>> which
>> > application to use as a baseline. If you look at Section 5.1 of 
>> > 
>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.tx
>> > t
>> then
>> > you see that the Mobile IPv6 specific AVPs are optional in the
>> Command Code
>> > ABNF. Hence, building on EAP is probably not such a bad idea.
>> 
>>  Not sure to understand your comment. If we define a new App-Id we 
>> won't build the application on Diameter EAP. It will be orthogonal.
>> What do you mean ?
>> >
>> > There is also the question how much you want to say about Mobile 
>> > IPv6 bootstrapping in the ERP document.
>> 
>>  Yes, Diameter ERP could be used along with Diameter EAP or Diameter 
>> Mobile IPv6.
>> 
>>  Regards,
>> 
>>  Julien
>> 
>> 
>> 
>> >
>> > Ciao
>> > Hannes
>> >
>> >>-----Original Message-----
>> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>> >>Sent: 04 March, 2009 12:03
>> >>To: Hannes Tschofenig
>> >>Cc: dime@ietf.org
>> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>> >>(non-roaming case)
>> >>
>> >>hi hannes,
>> >>
>> >> see inline,
>> >>
>> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig 
>> >><Hannes.Tschofenig@gmx.net> wrote:
>> >>> Hi Julien,
>> >>>
>> >>> When we discussed this at the phone conference call (and the 
>> >>> discussion is also captured in the meeting minutes) then 
>I thought 
>> >>> that the conclusion was to define a new Diameter application
>> >>for this exchange:
>> >>>
>> >>>
>> >>> Peer Authenticator Server
>> >>> ==== ============= ======
>> >>>
>> >>> [<-- EAP-Initiate/ -----
>> >>> Re-auth-Start]
>> >>> [<-- EAP-Request/ ------
>> >>> Identity]
>> >>>
>> >>>
>> >>> ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>> >>> Re-auth/ Re-auth/
>> >>> [Bootstrap] [Bootstrap])
>> >>>
>> >>> <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>> >>> Re-auth/ Re-auth/
>> >>> [Bootstrap] [Bootstrap])
>> >>>
>> >>> Note: [] brackets indicate optionality.
>> >>>
>> >>> Figure 2: ERP Exchange
>> >>>
>> >>> (The server in the figure above is the HOKEY server, a dedicated
>> >>> entity.)
>> >>>
>> >>>
>> >>> The initial EAP authentication is left untouched and, as Glen 
>> >>> explained us, there is the assumption that the AAA entities work 
>> >>> together with the HOKEY servers in a non-standardized way.
>> >>To me that sounded like a good plan.
>> >>>
>> >>> Does this make any sense?
>> >>
>> >> Taking into accounts that we have one app-id for Diameter EAP (I 
>> >>would say NASREQ-EAP) AND soon another app-id for Diameter
>> >>MIP6 (which also use EAP for authentication). It certainly make 
>> >>sense to not reuse the same App-ID for ERP if we want to 
>use ERP for 
>> >>the mip6 case.
>> >>
>> >> Let's see if others have opinion.
>> >>
>> >> Regards,
>> >>
>> >> Julien
>> >>
>> >>>
>> >>>
>> >>> The non-HOKEY expert
>> >>> Hannes
>> >>>
>> >>> PS: I never said that this is specific document is going to
>> >>be trivial
>> >>> :-)
>> >>>
>> >>>>-----Original Message-----
>> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>> Behalf
>> >>>>Of Julien Bournelle
>> >>>>Sent: 04 March, 2009 09:05
>> >>>>To: dime@ietf.org
>> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>> >>>>(non-roaming case)
>> >>>>
>> >>>>Hi all,
>> >>>>
>> >>>> we try to solve the issue concerning the need for a new
>> >>App-Id or not.
>> >>>>
>> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It 
>> >>>>basically defines two new EAP codes and uses keying material
>> derived
>> >>>>from a first EAP authentication.
>> >>>>
>> >>>> To start the discussion, let's take the non-roaming case.
>> >>>>
>> >>>> In non-roaming, we have first an EAP authentication using 
>> >>>>Diameter EAP.
>> >>>> Then, for reauthentication using ERP, we have two messages
>> >>>>(Request/Response) between NAS and the AAA/ERP server carrying 
>> >>>>EAP packets
>> >>>>
>> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>> >>>>
>> >>>> So, either we reuse the Diameter EAP Application 
>(DER/DEA) or we 
>> >>>>define a new Diameter Application.
>> >>>>
>> >>>> If we use a new Diameter Application, a new Diameter
>> >>session will be
>> >>>>created and eventually a new Diameter server will be 
>reached. What 
>> >>>>bothers me in this case is that we basically perform a 
>> >>>>reauthentication for the same session which is primarly
>> >>handled at the
>> >>>>AAA/EAP server. So, i'm wondering what happens concerning 
>> >>>>Authorization Lifetime session etc..
>> >>>>
>> >>>> Note that I still don't have strong opinion and I'll be
>> >>glad to hear
>> >>>>opinions from others.
>> >>>>
>> >>>> Regards,
>> >>>>
>> >>>> Julien
>> >>>>_______________________________________________
>> >>>>DiME mailing list
>> >>>>DiME@ietf.org
>> >>>>https://www.ietf.org/mailman/listinfo/dime
>> >>>>
>> >>>
>> >>>
>> >>
>> >
>> >
>> _______________________________________________
>> DiME mailing list
>> DiME@ietf.org
>> https://www.ietf.org/mailman/listinfo/dime
>
>_______________________________________________
>HOKEY mailing list
>HOKEY@ietf.org
>https://www.ietf.org/mailman/listinfo/hokey
>

_______________________________________________
HOKEY mailing list
HOKEY@ietf.org
https://www.ietf.org/mailman/listinfo/hokey

From julien.bournelle@gmail.com  Thu Mar 12 02:06:11 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E00B93A6877; Thu, 12 Mar 2009 02:06:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.499
X-Spam-Level: 
X-Spam-Status: No, score=-2.499 tagged_above=-999 required=5 tests=[AWL=0.100,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qmsigrZ46QMJ; Thu, 12 Mar 2009 02:06:10 -0700 (PDT)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.30]) by core3.amsl.com (Postfix) with ESMTP id 390873A67CC; Thu, 12 Mar 2009 02:06:10 -0700 (PDT)
Received: by yw-out-2324.google.com with SMTP id 5so1165612ywh.49 for <multiple recipients>; Thu, 12 Mar 2009 02:06:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=WbTVU5j7hNN0OJdfWOeVUw5K2XSXhE3SoTb/4GKnsHg=; b=ct+g1X82jV37rDpiuB3QwUA0f3L8HSf4yDdJLWG4jEpuvUnHRekb+QNNNGfMDTACNG MC3N/oQy0TssMui9QLLwavXP3SAB0KdVZZ8jbTjDdmGcP3ZdzHhfKHRY4E79rgyN6bzI Y0B1NBXpLEfpGpBpSjOvdRjWktmF+kutGmc60=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=GUowrsJlL9p2LKIqU6BqeOeUEdKb3RUB+tLlr/tyMRvfyeVxyRchd/05cE6EmqzKu0 +rUcHe/VIsjOc6PymnWq1d3+sFmy+Zf8y9rncdF8JOo53E5gBSu4s8Y/d+rJlL7RO7NQ rgRONR5QxwXqyicUXaXTp0E8aLTv9KyCK7Mco=
MIME-Version: 1.0
Received: by 10.220.45.212 with SMTP id g20mr3782999vcf.43.1236848806963; Thu,  12 Mar 2009 02:06:46 -0700 (PDT)
In-Reply-To: <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>
Date: Thu, 12 Mar 2009 10:06:46 +0100
Message-ID: <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Qin Wu <sunseawq@huawei.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:06:12 -0000

Hi Qin,

 let me try to give you my understanding concerning your (good) question.

On Thu, Mar 12, 2009 at 8:51 AM, Qin Wu <sunseawq@huawei.com> wrote:
> Hi:
> I am glad to see the further work associated with RFC5296 has been develo=
ped well in the Diameter working group.
> As regarding whether to define a new Diameter application for ERP, =A0I w=
ould like to ask a question first:
> As we know, the normal authentication is quite different from Re-authenti=
cation. Re-authentication is usually applicable for the inter-authenticator=
 handover scenarios. However, leave the inter-authenticator handover scenar=
ios aside, when the existing keying materials are expired on the serving au=
thenticator associated with the peer, which authentication mechanisms will =
be used to renew the lifetime of existing keying materials, normal authenti=
cation or Re-authentication?

 That's indeed a good question..
 In my understanding, the MSK lifetime is tied to the Diameter EAP session
 i.e. the AAA/EAP server provides a lifetime associated with this session a=
nd
keying material. When the lifetime expires, we have two options:

 1/ re-uses full EAP authentication with Diameter EAP

 2/ perform a reauthentication using ERP.


 If we use 1/, I don't see any problem.

 If we use 2/, and we have a new Diameter ERP app-id, a distinct AAA
server may be reached. And this AAA server is able to perform the
re-authentication
for this EAP client. How this is perform is out-of scope of our document bu=
t
we certainly need something to synchronize between the two AAA servers (the=
 one
used for normal authentication and the other for reauthentication). This
new AAA server will now be in charged of the session.

> If the answer is both, how to distinguish between them?

 My impression is that both are possible. But what do you mean by
"how to distinguish" ? at which level ?


 Regards,

 -Julien

> If the answer is normal authentication, I would like to support defining =
new Diameter application for ERP.
>
> Best Regards!
>
> -Qin
> ----- Original Message -----
> From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
> To: "'Glen Zorn'" <glenzorn@comcast.net>; "'Julien Bournelle'" <julien.bo=
urnelle@gmail.com>
> Cc: <dime@ietf.org>; <hokey@ietf.org>
> Sent: Wednesday, March 11, 2009 12:57 AM
> Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roa=
ming case)
>
>
> To quickly summarize for HOKEY WG members:
>
> We are currently trying to make the main design assumptions for the Diame=
ter
> ERP work and we are currently leaning towards defining a new Diameter
> application for ERP that builds on top of Diameter EAP and makes use of t=
he
> MIPv6 bootstrapping AVPs we have defined in
> draft-ietf-dime-mip6-split-16.txt.
>
> If you have an opinion about the Diameter ERP design please let us know
> ASAP. We would like to cast these things in stone pretty quickly.
> If you are planning to write code then drop us a note.
>
> Ciao
> Hannes
>
>>-----Original Message-----
>>From: hokey-bounces@ietf.org [mailto:hokey-bounces@ietf.org]
>>On Behalf Of Glen Zorn
>>Sent: 10 March, 2009 18:38
>>To: 'Julien Bournelle'; 'Hannes Tschofenig'
>>Cc: dime@ietf.org; hokey@ietf.org
>>Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or
>>not ?(non-roaming case)
>>
>>Can we include the hokey WG in this discussion, please?
>>
>>> -----Original Message-----
>>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf
>>> Of Julien Bournelle
>>> Sent: Tuesday, March 10, 2009 3:14 AM
>>> To: Hannes Tschofenig
>>> Cc: dime@ietf.org
>>> Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>(non-roaming
>>> case)
>>>
>>> Hi hannes,
>>>
>>> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig
>>> <Hannes.Tschofenig@gmx.net> wrote:
>>> > I also have to add ...
>>> >
>>> > If you define a new Diameter Application ID then you have to decide
>>> which
>>> > application to use as a baseline. If you look at Section 5.1 of
>>> >
>>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.tx
>>> > t
>>> then
>>> > you see that the Mobile IPv6 specific AVPs are optional in the
>>> Command Code
>>> > ABNF. Hence, building on EAP is probably not such a bad idea.
>>>
>>> =A0Not sure to understand your comment. If we define a new App-Id we
>>> won't build the application on Diameter EAP. It will be orthogonal.
>>> What do you mean ?
>>> >
>>> > There is also the question how much you want to say about Mobile
>>> > IPv6 bootstrapping in the ERP document.
>>>
>>> =A0Yes, Diameter ERP could be used along with Diameter EAP or Diameter
>>> Mobile IPv6.
>>>
>>> =A0Regards,
>>>
>>> =A0Julien
>>>
>>>
>>>
>>> >
>>> > Ciao
>>> > Hannes
>>> >
>>> >>-----Original Message-----
>>> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>>> >>Sent: 04 March, 2009 12:03
>>> >>To: Hannes Tschofenig
>>> >>Cc: dime@ietf.org
>>> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>> >>(non-roaming case)
>>> >>
>>> >>hi hannes,
>>> >>
>>> >> see inline,
>>> >>
>>> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
>>> >><Hannes.Tschofenig@gmx.net> wrote:
>>> >>> Hi Julien,
>>> >>>
>>> >>> When we discussed this at the phone conference call (and the
>>> >>> discussion is also captured in the meeting minutes) then
>>I thought
>>> >>> that the conclusion was to define a new Diameter application
>>> >>for this exchange:
>>> >>>
>>> >>>
>>> >>> Peer Authenticator Server
>>> >>> =3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=
=3D=3D
>>> >>>
>>> >>> [<-- EAP-Initiate/ -----
>>> >>> Re-auth-Start]
>>> >>> [<-- EAP-Request/ ------
>>> >>> Identity]
>>> >>>
>>> >>>
>>> >>> ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>> >>> Re-auth/ Re-auth/
>>> >>> [Bootstrap] [Bootstrap])
>>> >>>
>>> >>> <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>> >>> Re-auth/ Re-auth/
>>> >>> [Bootstrap] [Bootstrap])
>>> >>>
>>> >>> Note: [] brackets indicate optionality.
>>> >>>
>>> >>> Figure 2: ERP Exchange
>>> >>>
>>> >>> (The server in the figure above is the HOKEY server, a dedicated
>>> >>> entity.)
>>> >>>
>>> >>>
>>> >>> The initial EAP authentication is left untouched and, as Glen
>>> >>> explained us, there is the assumption that the AAA entities work
>>> >>> together with the HOKEY servers in a non-standardized way.
>>> >>To me that sounded like a good plan.
>>> >>>
>>> >>> Does this make any sense?
>>> >>
>>> >> Taking into accounts that we have one app-id for Diameter EAP (I
>>> >>would say NASREQ-EAP) AND soon another app-id for Diameter
>>> >>MIP6 (which also use EAP for authentication). It certainly make
>>> >>sense to not reuse the same App-ID for ERP if we want to
>>use ERP for
>>> >>the mip6 case.
>>> >>
>>> >> Let's see if others have opinion.
>>> >>
>>> >> Regards,
>>> >>
>>> >> Julien
>>> >>
>>> >>>
>>> >>>
>>> >>> The non-HOKEY expert
>>> >>> Hannes
>>> >>>
>>> >>> PS: I never said that this is specific document is going to
>>> >>be trivial
>>> >>> :-)
>>> >>>
>>> >>>>-----Original Message-----
>>> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>>> Behalf
>>> >>>>Of Julien Bournelle
>>> >>>>Sent: 04 March, 2009 09:05
>>> >>>>To: dime@ietf.org
>>> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>> >>>>(non-roaming case)
>>> >>>>
>>> >>>>Hi all,
>>> >>>>
>>> >>>> we try to solve the issue concerning the need for a new
>>> >>App-Id or not.
>>> >>>>
>>> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It
>>> >>>>basically defines two new EAP codes and uses keying material
>>> derived
>>> >>>>from a first EAP authentication.
>>> >>>>
>>> >>>> To start the discussion, let's take the non-roaming case.
>>> >>>>
>>> >>>> In non-roaming, we have first an EAP authentication using
>>> >>>>Diameter EAP.
>>> >>>> Then, for reauthentication using ERP, we have two messages
>>> >>>>(Request/Response) between NAS and the AAA/ERP server carrying
>>> >>>>EAP packets
>>> >>>>
>>> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>> >>>>
>>> >>>> So, either we reuse the Diameter EAP Application
>>(DER/DEA) or we
>>> >>>>define a new Diameter Application.
>>> >>>>
>>> >>>> If we use a new Diameter Application, a new Diameter
>>> >>session will be
>>> >>>>created and eventually a new Diameter server will be
>>reached. What
>>> >>>>bothers me in this case is that we basically perform a
>>> >>>>reauthentication for the same session which is primarly
>>> >>handled at the
>>> >>>>AAA/EAP server. So, i'm wondering what happens concerning
>>> >>>>Authorization Lifetime session etc..
>>> >>>>
>>> >>>> Note that I still don't have strong opinion and I'll be
>>> >>glad to hear
>>> >>>>opinions from others.
>>> >>>>
>>> >>>> Regards,
>>> >>>>
>>> >>>> Julien
>>> >>>>_______________________________________________
>>> >>>>DiME mailing list
>>> >>>>DiME@ietf.org
>>> >>>>https://www.ietf.org/mailman/listinfo/dime
>>> >>>>
>>> >>>
>>> >>>
>>> >>
>>> >
>>> >
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>>
>>_______________________________________________
>>HOKEY mailing list
>>HOKEY@ietf.org
>>https://www.ietf.org/mailman/listinfo/hokey
>>
>
> _______________________________________________
> HOKEY mailing list
> HOKEY@ietf.org
> https://www.ietf.org/mailman/listinfo/hokey
>

From Hannes.Tschofenig@gmx.net  Thu Mar 12 02:11:58 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E52F53A67CC for <dime@core3.amsl.com>; Thu, 12 Mar 2009 02:11:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.356
X-Spam-Level: 
X-Spam-Status: No, score=-2.356 tagged_above=-999 required=5 tests=[AWL=0.243,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TDar6bxakTgn for <dime@core3.amsl.com>; Thu, 12 Mar 2009 02:11:55 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id B1E343A6853 for <dime@ietf.org>; Thu, 12 Mar 2009 02:11:54 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 09:12:30 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp064) with SMTP; 12 Mar 2009 10:12:30 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/t5QZCdSjtCWOJKolGMoYgEHiwSVZ2wV+CQIpbHa P4v6cDCqbI9QXP
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>, "'Qin Wu'" <sunseawq@huawei.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
Date: Thu, 12 Mar 2009 11:13:37 +0200
Message-ID: <096601c9a2f2$d451b640$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
Thread-Index: Acmi8d8QEwdvOlOuSv+C0oEWyOvelQAAKRUQ
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.73
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:11:59 -0000

> 1/ re-uses full EAP authentication with Diameter EAP

> 2/ perform a reauthentication using ERP.

> If we use 2/, and we have a new Diameter ERP app-id, a 
>distinct AAA server may be reached. 

If I understood Glen correctly from previous conversations then the Diameter
ERP re-authentication does not happen with a AAA server but with a HOKEY
server. Hence, I am not sure that there is an issue. 

Ciao
Hannes


From sunseawq@huawei.com  Thu Mar 12 02:30:21 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1A67F3A6A30; Thu, 12 Mar 2009 02:30:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.442
X-Spam-Level: 
X-Spam-Status: No, score=-0.442 tagged_above=-999 required=5 tests=[AWL=0.053,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QGZHqEOkbvxA; Thu, 12 Mar 2009 02:30:19 -0700 (PDT)
Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 5196B3A67CC; Thu, 12 Mar 2009 02:30:19 -0700 (PDT)
Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGD00GC2ZR5G3@szxga03-in.huawei.com>; Thu, 12 Mar 2009 17:30:41 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGD00BOOZR4NM@szxga03-in.huawei.com>; Thu, 12 Mar 2009 17:30:40 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGD00DS6ZR4DN@szxml05-in.huawei.com>; Thu, 12 Mar 2009 17:30:40 +0800 (CST)
Date: Thu, 12 Mar 2009 17:30:40 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>, 'Julien Bournelle' <julien.bournelle@gmail.com>
Message-id: <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:30:21 -0000

Hi:
If my understanding is correct, the ERP re-authentication with a AAA server through a Hokey server will happen in the intial EAP exchange or in  the bootstrapping phase.
e.g., when the peer firstly enter into one visited AAA domain away from the home AAA server, intial EAP exchange between the peer and home AAA server is required. However when the peer move between two adjacent authenticator within the same AAA domain,  the ERP re-authentication does not happen with a AAA server but with a local hokey server which is a optimized approach to reduce handoff latency.

Best Regards!
-Qin
----- Original Message ----- 
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>; "'Qin Wu'" <sunseawq@huawei.com>
Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
Sent: Thursday, March 12, 2009 5:13 PM
Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roaming case)


> 
>> 1/ re-uses full EAP authentication with Diameter EAP
> 
>> 2/ perform a reauthentication using ERP.
> 
>> If we use 2/, and we have a new Diameter ERP app-id, a 
>>distinct AAA server may be reached. 
> 
> If I understood Glen correctly from previous conversations then the Diameter
> ERP re-authentication does not happen with a AAA server but with a HOKEY
> server. Hence, I am not sure that there is an issue. 
> 
> Ciao
> Hannes
>

From julien.bournelle@gmail.com  Thu Mar 12 02:45:13 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 64D803A6A30; Thu, 12 Mar 2009 02:45:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iil7AoWO1j+F; Thu, 12 Mar 2009 02:45:11 -0700 (PDT)
Received: from mail-gx0-f167.google.com (mail-gx0-f167.google.com [209.85.217.167]) by core3.amsl.com (Postfix) with ESMTP id 3AD323A6403; Thu, 12 Mar 2009 02:45:11 -0700 (PDT)
Received: by gxk11 with SMTP id 11so886195gxk.13 for <multiple recipients>; Thu, 12 Mar 2009 02:45:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=RvSEJnVZB5ptzyaGo8fLgO/5ty/+65lLeeJQG3uQ8DU=; b=ICpWxZugSGr0tjcfjaiGmY4qoG0M8Mqr91tK5GZ0sipt5CnGIbRHPlbkb5omk7nzHb BXz28NFG7jqJji8Bqin03qaBr276XNcECkfBN11ll5QGXwNvrh6gHYv4M3I9Kzngavxq L5zCUaRbTb3W5pHo9iAI6zLM6UKcLyE08Xck8=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=m1e2iwFP3qHpuphwXzGoTL62D6m+p1k6A98OiI/g9/Pa8fRbQ4LO16D5hthTk/a3wE 4eW390H37rqNdoS/k15tU8Tks3Bj3YSZziZP/V9anGQSOXFOfz+i2Dl6QjtOmxF3JRWA ctbfWySfXDW7S4Ub0l2e3JFbU4UNXwzf58l6E=
MIME-Version: 1.0
Received: by 10.220.92.139 with SMTP id r11mr3854700vcm.15.1236851147971; Thu,  12 Mar 2009 02:45:47 -0700 (PDT)
In-Reply-To: <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
Date: Thu, 12 Mar 2009 10:45:47 +0100
Message-ID: <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Qin Wu <sunseawq@huawei.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:45:13 -0000

Hi all,

 I have to correct myself. Sorry about that.

On Thu, Mar 12, 2009 at 10:06 AM, Julien Bournelle
<julien.bournelle@gmail.com> wrote:
> Hi Qin,
>
> =A0let me try to give you my understanding concerning your (good) questio=
n.
>
> On Thu, Mar 12, 2009 at 8:51 AM, Qin Wu <sunseawq@huawei.com> wrote:
>> Hi:
>> I am glad to see the further work associated with RFC5296 has been devel=
oped well in the Diameter working group.
>> As regarding whether to define a new Diameter application for ERP, =A0I =
would like to ask a question first:
>> As we know, the normal authentication is quite different from Re-authent=
ication. Re-authentication is usually applicable for the inter-authenticato=
r handover scenarios. However, leave the inter-authenticator handover scena=
rios aside, when the existing keying materials are expired on the serving a=
uthenticator associated with the peer, which authentication mechanisms will=
 be used to renew the lifetime of existing keying materials, normal authent=
ication or Re-authentication?
>
> =A0That's indeed a good question..
> =A0In my understanding, the MSK lifetime is tied to the Diameter EAP sess=
ion
> =A0i.e. the AAA/EAP server provides a lifetime associated with this sessi=
on and
> keying material. When the lifetime expires, we have two options:
>
> =A01/ re-uses full EAP authentication with Diameter EAP
>
> =A02/ perform a reauthentication using ERP.

 Basically I don't think we can use ERP here because if the MSK, EMSK
lifetime expires, the
whole keying material for ERP also expires. So, correct me if I'm
wrong, but when the existing keying
materials (derived at initial EAP authentication) expires, a normal
authentication should occur.

 Regards,

 Julien

>
>
> =A0If we use 1/, I don't see any problem.
>
> =A0If we use 2/, and we have a new Diameter ERP app-id, a distinct AAA
> server may be reached. And this AAA server is able to perform the
> re-authentication
> for this EAP client. How this is perform is out-of scope of our document =
but
> we certainly need something to synchronize between the two AAA servers (t=
he one
> used for normal authentication and the other for reauthentication). This
> new AAA server will now be in charged of the session.
>
>> If the answer is both, how to distinguish between them?
>
> =A0My impression is that both are possible. But what do you mean by
> "how to distinguish" ? at which level ?
>
>
> =A0Regards,
>
> =A0-Julien
>
>> If the answer is normal authentication, I would like to support defining=
 new Diameter application for ERP.
>>
>> Best Regards!
>>
>> -Qin
>> ----- Original Message -----
>> From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
>> To: "'Glen Zorn'" <glenzorn@comcast.net>; "'Julien Bournelle'" <julien.b=
ournelle@gmail.com>
>> Cc: <dime@ietf.org>; <hokey@ietf.org>
>> Sent: Wednesday, March 11, 2009 12:57 AM
>> Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-ro=
aming case)
>>
>>
>> To quickly summarize for HOKEY WG members:
>>
>> We are currently trying to make the main design assumptions for the Diam=
eter
>> ERP work and we are currently leaning towards defining a new Diameter
>> application for ERP that builds on top of Diameter EAP and makes use of =
the
>> MIPv6 bootstrapping AVPs we have defined in
>> draft-ietf-dime-mip6-split-16.txt.
>>
>> If you have an opinion about the Diameter ERP design please let us know
>> ASAP. We would like to cast these things in stone pretty quickly.
>> If you are planning to write code then drop us a note.
>>
>> Ciao
>> Hannes
>>
>>>-----Original Message-----
>>>From: hokey-bounces@ietf.org [mailto:hokey-bounces@ietf.org]
>>>On Behalf Of Glen Zorn
>>>Sent: 10 March, 2009 18:38
>>>To: 'Julien Bournelle'; 'Hannes Tschofenig'
>>>Cc: dime@ietf.org; hokey@ietf.org
>>>Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or
>>>not ?(non-roaming case)
>>>
>>>Can we include the hokey WG in this discussion, please?
>>>
>>>> -----Original Message-----
>>>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf
>>>> Of Julien Bournelle
>>>> Sent: Tuesday, March 10, 2009 3:14 AM
>>>> To: Hannes Tschofenig
>>>> Cc: dime@ietf.org
>>>> Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>>(non-roaming
>>>> case)
>>>>
>>>> Hi hannes,
>>>>
>>>> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig
>>>> <Hannes.Tschofenig@gmx.net> wrote:
>>>> > I also have to add ...
>>>> >
>>>> > If you define a new Diameter Application ID then you have to decide
>>>> which
>>>> > application to use as a baseline. If you look at Section 5.1 of
>>>> >
>>>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.tx
>>>> > t
>>>> then
>>>> > you see that the Mobile IPv6 specific AVPs are optional in the
>>>> Command Code
>>>> > ABNF. Hence, building on EAP is probably not such a bad idea.
>>>>
>>>> =A0Not sure to understand your comment. If we define a new App-Id we
>>>> won't build the application on Diameter EAP. It will be orthogonal.
>>>> What do you mean ?
>>>> >
>>>> > There is also the question how much you want to say about Mobile
>>>> > IPv6 bootstrapping in the ERP document.
>>>>
>>>> =A0Yes, Diameter ERP could be used along with Diameter EAP or Diameter
>>>> Mobile IPv6.
>>>>
>>>> =A0Regards,
>>>>
>>>> =A0Julien
>>>>
>>>>
>>>>
>>>> >
>>>> > Ciao
>>>> > Hannes
>>>> >
>>>> >>-----Original Message-----
>>>> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>>>> >>Sent: 04 March, 2009 12:03
>>>> >>To: Hannes Tschofenig
>>>> >>Cc: dime@ietf.org
>>>> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>>> >>(non-roaming case)
>>>> >>
>>>> >>hi hannes,
>>>> >>
>>>> >> see inline,
>>>> >>
>>>> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
>>>> >><Hannes.Tschofenig@gmx.net> wrote:
>>>> >>> Hi Julien,
>>>> >>>
>>>> >>> When we discussed this at the phone conference call (and the
>>>> >>> discussion is also captured in the meeting minutes) then
>>>I thought
>>>> >>> that the conclusion was to define a new Diameter application
>>>> >>for this exchange:
>>>> >>>
>>>> >>>
>>>> >>> Peer Authenticator Server
>>>> >>> =3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=
=3D=3D
>>>> >>>
>>>> >>> [<-- EAP-Initiate/ -----
>>>> >>> Re-auth-Start]
>>>> >>> [<-- EAP-Request/ ------
>>>> >>> Identity]
>>>> >>>
>>>> >>>
>>>> >>> ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>>> >>> Re-auth/ Re-auth/
>>>> >>> [Bootstrap] [Bootstrap])
>>>> >>>
>>>> >>> <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>>> >>> Re-auth/ Re-auth/
>>>> >>> [Bootstrap] [Bootstrap])
>>>> >>>
>>>> >>> Note: [] brackets indicate optionality.
>>>> >>>
>>>> >>> Figure 2: ERP Exchange
>>>> >>>
>>>> >>> (The server in the figure above is the HOKEY server, a dedicated
>>>> >>> entity.)
>>>> >>>
>>>> >>>
>>>> >>> The initial EAP authentication is left untouched and, as Glen
>>>> >>> explained us, there is the assumption that the AAA entities work
>>>> >>> together with the HOKEY servers in a non-standardized way.
>>>> >>To me that sounded like a good plan.
>>>> >>>
>>>> >>> Does this make any sense?
>>>> >>
>>>> >> Taking into accounts that we have one app-id for Diameter EAP (I
>>>> >>would say NASREQ-EAP) AND soon another app-id for Diameter
>>>> >>MIP6 (which also use EAP for authentication). It certainly make
>>>> >>sense to not reuse the same App-ID for ERP if we want to
>>>use ERP for
>>>> >>the mip6 case.
>>>> >>
>>>> >> Let's see if others have opinion.
>>>> >>
>>>> >> Regards,
>>>> >>
>>>> >> Julien
>>>> >>
>>>> >>>
>>>> >>>
>>>> >>> The non-HOKEY expert
>>>> >>> Hannes
>>>> >>>
>>>> >>> PS: I never said that this is specific document is going to
>>>> >>be trivial
>>>> >>> :-)
>>>> >>>
>>>> >>>>-----Original Message-----
>>>> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>>>> Behalf
>>>> >>>>Of Julien Bournelle
>>>> >>>>Sent: 04 March, 2009 09:05
>>>> >>>>To: dime@ietf.org
>>>> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>>> >>>>(non-roaming case)
>>>> >>>>
>>>> >>>>Hi all,
>>>> >>>>
>>>> >>>> we try to solve the issue concerning the need for a new
>>>> >>App-Id or not.
>>>> >>>>
>>>> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It
>>>> >>>>basically defines two new EAP codes and uses keying material
>>>> derived
>>>> >>>>from a first EAP authentication.
>>>> >>>>
>>>> >>>> To start the discussion, let's take the non-roaming case.
>>>> >>>>
>>>> >>>> In non-roaming, we have first an EAP authentication using
>>>> >>>>Diameter EAP.
>>>> >>>> Then, for reauthentication using ERP, we have two messages
>>>> >>>>(Request/Response) between NAS and the AAA/ERP server carrying
>>>> >>>>EAP packets
>>>> >>>>
>>>> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>>> >>>>
>>>> >>>> So, either we reuse the Diameter EAP Application
>>>(DER/DEA) or we
>>>> >>>>define a new Diameter Application.
>>>> >>>>
>>>> >>>> If we use a new Diameter Application, a new Diameter
>>>> >>session will be
>>>> >>>>created and eventually a new Diameter server will be
>>>reached. What
>>>> >>>>bothers me in this case is that we basically perform a
>>>> >>>>reauthentication for the same session which is primarly
>>>> >>handled at the
>>>> >>>>AAA/EAP server. So, i'm wondering what happens concerning
>>>> >>>>Authorization Lifetime session etc..
>>>> >>>>
>>>> >>>> Note that I still don't have strong opinion and I'll be
>>>> >>glad to hear
>>>> >>>>opinions from others.
>>>> >>>>
>>>> >>>> Regards,
>>>> >>>>
>>>> >>>> Julien
>>>> >>>>_______________________________________________
>>>> >>>>DiME mailing list
>>>> >>>>DiME@ietf.org
>>>> >>>>https://www.ietf.org/mailman/listinfo/dime
>>>> >>>>
>>>> >>>
>>>> >>>
>>>> >>
>>>> >
>>>> >
>>>> _______________________________________________
>>>> DiME mailing list
>>>> DiME@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dime
>>>
>>>_______________________________________________
>>>HOKEY mailing list
>>>HOKEY@ietf.org
>>>https://www.ietf.org/mailman/listinfo/hokey
>>>
>>
>> _______________________________________________
>> HOKEY mailing list
>> HOKEY@ietf.org
>> https://www.ietf.org/mailman/listinfo/hokey
>>
>

From julien.bournelle@gmail.com  Thu Mar 12 02:49:23 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 427713A6AE9; Thu, 12 Mar 2009 02:49:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdfKkmT+Bvjt; Thu, 12 Mar 2009 02:49:19 -0700 (PDT)
Received: from mail-gx0-f167.google.com (mail-gx0-f167.google.com [209.85.217.167]) by core3.amsl.com (Postfix) with ESMTP id 3B45B3A68F7; Thu, 12 Mar 2009 02:49:19 -0700 (PDT)
Received: by gxk11 with SMTP id 11so887481gxk.13 for <multiple recipients>; Thu, 12 Mar 2009 02:49:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=XUsH8x0dv+49o2Kck/AUXMcT9ujLduUh0Qcu+zdxO9s=; b=tiRXHtHoEHred3vqm1RzINrshi3sSt3AQI/fCT0V4kysPbFHdH7d2ZHqHPZPMuwHui wKwUQtNGfu4VAkyox+CopXn47GszpAKzyGHj67ovrIwzSgMMz3HHyadYwGF/pc7fWUDl vtJVRwnSzrRIdxm4aoPC6PMCojhrOlENwBTkk=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=iwJDVa6+jtMnGLRrPjpHWvHD0pEz5TEZiFcQQ45wxd4dljRNpzjDfx3k/4C51Fexau kwEpeucINSPW3gDxnM7EH0L1RUtaKl0v+RiE++43jR4LKNtPGfvBmiGxWWccR/N98Yd4 DoLSVvlvlcdnTFkvaYeAGXNIyD0eJJu4S1mpU=
MIME-Version: 1.0
Received: by 10.220.87.1 with SMTP id u1mr3848323vcl.2.1236851396201; Thu, 12  Mar 2009 02:49:56 -0700 (PDT)
In-Reply-To: <096601c9a2f2$d451b640$0201a8c0@nsnintra.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net>
Date: Thu, 12 Mar 2009 10:49:56 +0100
Message-ID: <5e2406980903120249x4643ca89wecef7761332c4da5@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:49:23 -0000

Hi hannes,

On Thu, Mar 12, 2009 at 10:13 AM, Hannes Tschofenig
<Hannes.Tschofenig@gmx.net> wrote:
>
>> 1/ re-uses full EAP authentication with Diameter EAP
>
>> 2/ perform a reauthentication using ERP.
>
>> If we use 2/, and we have a new Diameter ERP app-id, a
>>distinct AAA server may be reached.
>
> If I understood Glen correctly from previous conversations then the Diameter
> ERP re-authentication does not happen with a AAA server but with a HOKEY
> server. Hence, I am not sure that there is an issue.

 yes, you're right. But for me a HOKEY server is like an EAP server. It may be
collocated or not with a AAA server but the NAS uses Diameter protocol so
the message is a AAA message which is going to reach a AAA server (colocated
or not with an HOKEY server).

 Not that I was not pointing this as an issue.


 Regards,

 Julien

>
> Ciao
> Hannes
>
>

From julien.bournelle@gmail.com  Thu Mar 12 02:52:40 2009
Return-Path: <julien.bournelle@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A64373A6AE9; Thu, 12 Mar 2009 02:52:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.524
X-Spam-Level: 
X-Spam-Status: No, score=-2.524 tagged_above=-999 required=5 tests=[AWL=0.075,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4uD-SIZvkPzz; Thu, 12 Mar 2009 02:52:39 -0700 (PDT)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.29]) by core3.amsl.com (Postfix) with ESMTP id A1D653A68F7; Thu, 12 Mar 2009 02:52:39 -0700 (PDT)
Received: by yw-out-2324.google.com with SMTP id 5so1178346ywh.49 for <multiple recipients>; Thu, 12 Mar 2009 02:53:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=xNv+fm+Yxm4ksxSKhdrODs1NcWG/n1kxHCAwIpgmxME=; b=t25lbhkoTgMZALekbtENKyocuGXQ9ROhjh6CXlTu3gQTG8nnplvg+Q5s0B6/ynCG// ITM72xiqtoqD4jISrqUtdqip6m7HJlUXUOSxsGKZdH8e9OJC1rXShqMJIo46UQBq+SOt BzXRjQPZ7A1Dohfoq3WgHiVoLAuvoGch6pqZw=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=Uu8PIrwcPJIFujJPYYIc+Q6uhLyKG4c532iMhbC0elGoYfHPOw+av9EUxn+bAgZijW 7MFdJ+qp1s367sekk3p3NhuNC+HY8JPheobQhe8jgN0hJiJAfP8YpdHhDF2Ls8hLmnSR GEOWyyQKILMZi4NMn01djZFJBYbEtzH2ki+p8=
MIME-Version: 1.0
Received: by 10.220.96.130 with SMTP id h2mr3799498vcn.21.1236851596491; Thu,  12 Mar 2009 02:53:16 -0700 (PDT)
In-Reply-To: <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net> <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com>
Date: Thu, 12 Mar 2009 10:53:16 +0100
Message-ID: <5e2406980903120253p68f5e4aen7223c606716110c8@mail.gmail.com>
From: Julien Bournelle <julien.bournelle@gmail.com>
To: Qin Wu <sunseawq@huawei.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:52:40 -0000

Hi Qin,

On Thu, Mar 12, 2009 at 10:30 AM, Qin Wu <sunseawq@huawei.com> wrote:
> Hi:
> If my understanding is correct, the ERP re-authentication with a AAA serv=
er through a Hokey server will happen in the intial EAP exchange or in =A0t=
he bootstrapping phase.
> e.g., when the peer firstly enter into one visited AAA domain away from t=
he home AAA server, intial EAP exchange between the peer and home AAA serve=
r is required. However when the peer move between two adjacent authenticato=
r within the same AAA domain, =A0the ERP re-authentication does not happen =
with a AAA server but with a local hokey server which is a optimized approa=
ch to reduce handoff latency.

 hmm, same comment as for hannes. The local hokey server has a AAA
part (colocated or not). We are using a AAA protocol between the NAS
and the HOKEY server, so by extension, the HOKEY server as a AAA part
(colocated or not).

 Regards,

 Julien

>
> Best Regards!
> -Qin
> ----- Original Message -----
> From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
> To: "'Julien Bournelle'" <julien.bournelle@gmail.com>; "'Qin Wu'" <sunsea=
wq@huawei.com>
> Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.or=
g>
> Sent: Thursday, March 12, 2009 5:13 PM
> Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roa=
ming case)
>
>
>>
>>> 1/ re-uses full EAP authentication with Diameter EAP
>>
>>> 2/ perform a reauthentication using ERP.
>>
>>> If we use 2/, and we have a new Diameter ERP app-id, a
>>>distinct AAA server may be reached.
>>
>> If I understood Glen correctly from previous conversations then the Diam=
eter
>> ERP re-authentication does not happen with a AAA server but with a HOKEY
>> server. Hence, I am not sure that there is an issue.
>>
>> Ciao
>> Hannes
>>
>

From sunseawq@huawei.com  Thu Mar 12 02:54:10 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BF5A23A679F; Thu, 12 Mar 2009 02:54:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.444
X-Spam-Level: 
X-Spam-Status: No, score=-0.444 tagged_above=-999 required=5 tests=[AWL=0.051,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kLTnVl6vmkMN; Thu, 12 Mar 2009 02:54:04 -0700 (PDT)
Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 586893A69BA; Thu, 12 Mar 2009 02:54:04 -0700 (PDT)
Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00AA50UU5X@szxga01-in.huawei.com>; Thu, 12 Mar 2009 17:54:30 +0800 (CST)
Received: from huawei.com ([172.24.1.33]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00C190UUVY@szxga01-in.huawei.com>; Thu, 12 Mar 2009 17:54:30 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGE00FQ60UTR7@szxml06-in.huawei.com>; Thu, 12 Mar 2009 17:54:30 +0800 (CST)
Date: Thu, 12 Mar 2009 17:54:31 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Julien Bournelle <julien.bournelle@gmail.com>
Message-id: <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roamingcase)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 09:54:10 -0000

Hi, Julien:
Thank for your quick answer. please see inline.
-Qin
----- Original Message ----- 
From: "Julien Bournelle" <julien.bournelle@gmail.com>
To: "Qin Wu" <sunseawq@huawei.com>
Cc: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>; "Glen Zorn" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
Sent: Thursday, March 12, 2009 5:06 PM
Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roamingcase)


Hi Qin,

 let me try to give you my understanding concerning your (good) question.

On Thu, Mar 12, 2009 at 8:51 AM, Qin Wu <sunseawq@huawei.com> wrote:
> Hi:
> I am glad to see the further work associated with RFC5296 has been developed well in the Diameter working group.
> As regarding whether to define a new Diameter application for ERP, I would like to ask a question first:
> As we know, the normal authentication is quite different from Re-authentication. Re-authentication is usually applicable for the inter-authenticator handover scenarios. However, leave the inter-authenticator handover scenarios aside, when the existing keying materials are expired on the serving authenticator associated with the peer, which authentication mechanisms will be used to renew the lifetime of existing keying materials, normal authentication or Re-authentication?

 That's indeed a good question..
 In my understanding, the MSK lifetime is tied to the Diameter EAP session
 i.e. the AAA/EAP server provides a lifetime associated with this session and
keying material. When the lifetime expires, we have two options:

 1/ re-uses full EAP authentication with Diameter EAP

 2/ perform a reauthentication using ERP.


 If we use 1/, I don't see any problem.

[Qin] Yes, I agree.

 If we use 2/, and we have a new Diameter ERP app-id, a distinct AAA
server may be reached. And this AAA server is able to perform the
re-authentication
for this EAP client. How this is perform is out-of scope of our document but
we certainly need something to synchronize between the two AAA servers (the one
used for normal authentication and the other for reauthentication). This
new AAA server will now be in charged of the session.

> If the answer is both, how to distinguish between them?

 My impression is that both are possible. But what do you mean by
"how to distinguish" ? at which level ?

[Qin] What I conern here is if both  possible, how to make the AAA server choose between 1/ and 2/, why not use 1/, i.e., re-use full EAP authentication with Diameter EAP. Is it neccessary for both full EAP authenticatioin and ERP to do the same thing, i.e., renew the lifetime of keying materials.
As regarding "how to distinguish", what i mean is how to make the AAA server distinguish between 1/ and 2/, upon receiving AAA request with EAP request as payload from the authenticator. It should be in the AAA level. Is it necssary for the AAA to distinguish between 1/ and 2.

On the other hand, I think ERP is designed to establish the keying materials for inter-authenticator handover scenario which is a optimized approach in contrast with the full EAP authentication, So in this sense, it is a good idea to define new Diameter application for ERP to make difference.
Thanks!


 Regards,

 -Julien

> If the answer is normal authentication, I would like to support defining new Diameter application for ERP.
>
> Best Regards!
>
> -Qin
> ----- Original Message -----
> From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
> To: "'Glen Zorn'" <glenzorn@comcast.net>; "'Julien Bournelle'" <julien.bournelle@gmail.com>
> Cc: <dime@ietf.org>; <hokey@ietf.org>
> Sent: Wednesday, March 11, 2009 12:57 AM
> Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roaming case)
>
>
> To quickly summarize for HOKEY WG members:
>
> We are currently trying to make the main design assumptions for the Diameter
> ERP work and we are currently leaning towards defining a new Diameter
> application for ERP that builds on top of Diameter EAP and makes use of the
> MIPv6 bootstrapping AVPs we have defined in
> draft-ietf-dime-mip6-split-16.txt.
>
> If you have an opinion about the Diameter ERP design please let us know
> ASAP. We would like to cast these things in stone pretty quickly.
> If you are planning to write code then drop us a note.
>
> Ciao
> Hannes
>
>>-----Original Message-----
>>From: hokey-bounces@ietf.org [mailto:hokey-bounces@ietf.org]
>>On Behalf Of Glen Zorn
>>Sent: 10 March, 2009 18:38
>>To: 'Julien Bournelle'; 'Hannes Tschofenig'
>>Cc: dime@ietf.org; hokey@ietf.org
>>Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or
>>not ?(non-roaming case)
>>
>>Can we include the hokey WG in this discussion, please?
>>
>>> -----Original Message-----
>>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf
>>> Of Julien Bournelle
>>> Sent: Tuesday, March 10, 2009 3:14 AM
>>> To: Hannes Tschofenig
>>> Cc: dime@ietf.org
>>> Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>(non-roaming
>>> case)
>>>
>>> Hi hannes,
>>>
>>> On Sat, Mar 7, 2009 at 12:36 PM, Hannes Tschofenig
>>> <Hannes.Tschofenig@gmx.net> wrote:
>>> > I also have to add ...
>>> >
>>> > If you define a new Diameter Application ID then you have to decide
>>> which
>>> > application to use as a baseline. If you look at Section 5.1 of
>>> >
>>http://www.ietf.org/internet-drafts/draft-ietf-dime-mip6-split-16.tx
>>> > t
>>> then
>>> > you see that the Mobile IPv6 specific AVPs are optional in the
>>> Command Code
>>> > ABNF. Hence, building on EAP is probably not such a bad idea.
>>>
>>> Not sure to understand your comment. If we define a new App-Id we
>>> won't build the application on Diameter EAP. It will be orthogonal.
>>> What do you mean ?
>>> >
>>> > There is also the question how much you want to say about Mobile
>>> > IPv6 bootstrapping in the ERP document.
>>>
>>> Yes, Diameter ERP could be used along with Diameter EAP or Diameter
>>> Mobile IPv6.
>>>
>>> Regards,
>>>
>>> Julien
>>>
>>>
>>>
>>> >
>>> > Ciao
>>> > Hannes
>>> >
>>> >>-----Original Message-----
>>> >>From: Julien Bournelle [mailto:julien.bournelle@gmail.com]
>>> >>Sent: 04 March, 2009 12:03
>>> >>To: Hannes Tschofenig
>>> >>Cc: dime@ietf.org
>>> >>Subject: Re: [Dime] DiME ERP: new Application ID or not ?
>>> >>(non-roaming case)
>>> >>
>>> >>hi hannes,
>>> >>
>>> >> see inline,
>>> >>
>>> >>On Wed, Mar 4, 2009 at 9:14 AM, Hannes Tschofenig
>>> >><Hannes.Tschofenig@gmx.net> wrote:
>>> >>> Hi Julien,
>>> >>>
>>> >>> When we discussed this at the phone conference call (and the
>>> >>> discussion is also captured in the meeting minutes) then
>>I thought
>>> >>> that the conclusion was to define a new Diameter application
>>> >>for this exchange:
>>> >>>
>>> >>>
>>> >>> Peer Authenticator Server
>>> >>> ==== ============= ======
>>> >>>
>>> >>> [<-- EAP-Initiate/ -----
>>> >>> Re-auth-Start]
>>> >>> [<-- EAP-Request/ ------
>>> >>> Identity]
>>> >>>
>>> >>>
>>> >>> ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>> >>> Re-auth/ Re-auth/
>>> >>> [Bootstrap] [Bootstrap])
>>> >>>
>>> >>> <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>> >>> Re-auth/ Re-auth/
>>> >>> [Bootstrap] [Bootstrap])
>>> >>>
>>> >>> Note: [] brackets indicate optionality.
>>> >>>
>>> >>> Figure 2: ERP Exchange
>>> >>>
>>> >>> (The server in the figure above is the HOKEY server, a dedicated
>>> >>> entity.)
>>> >>>
>>> >>>
>>> >>> The initial EAP authentication is left untouched and, as Glen
>>> >>> explained us, there is the assumption that the AAA entities work
>>> >>> together with the HOKEY servers in a non-standardized way.
>>> >>To me that sounded like a good plan.
>>> >>>
>>> >>> Does this make any sense?
>>> >>
>>> >> Taking into accounts that we have one app-id for Diameter EAP (I
>>> >>would say NASREQ-EAP) AND soon another app-id for Diameter
>>> >>MIP6 (which also use EAP for authentication). It certainly make
>>> >>sense to not reuse the same App-ID for ERP if we want to
>>use ERP for
>>> >>the mip6 case.
>>> >>
>>> >> Let's see if others have opinion.
>>> >>
>>> >> Regards,
>>> >>
>>> >> Julien
>>> >>
>>> >>>
>>> >>>
>>> >>> The non-HOKEY expert
>>> >>> Hannes
>>> >>>
>>> >>> PS: I never said that this is specific document is going to
>>> >>be trivial
>>> >>> :-)
>>> >>>
>>> >>>>-----Original Message-----
>>> >>>>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On
>>> Behalf
>>> >>>>Of Julien Bournelle
>>> >>>>Sent: 04 March, 2009 09:05
>>> >>>>To: dime@ietf.org
>>> >>>>Subject: [Dime] DiME ERP: new Application ID or not ?
>>> >>>>(non-roaming case)
>>> >>>>
>>> >>>>Hi all,
>>> >>>>
>>> >>>> we try to solve the issue concerning the need for a new
>>> >>App-Id or not.
>>> >>>>
>>> >>>> The ERP protocol (RFC 5296) is to be used along with EAP. It
>>> >>>>basically defines two new EAP codes and uses keying material
>>> derived
>>> >>>>from a first EAP authentication.
>>> >>>>
>>> >>>> To start the discussion, let's take the non-roaming case.
>>> >>>>
>>> >>>> In non-roaming, we have first an EAP authentication using
>>> >>>>Diameter EAP.
>>> >>>> Then, for reauthentication using ERP, we have two messages
>>> >>>>(Request/Response) between NAS and the AAA/ERP server carrying
>>> >>>>EAP packets
>>> >>>>
>>> >>>> See (http://tools.ietf.org/html/rfc5296#page-6)
>>> >>>>
>>> >>>> So, either we reuse the Diameter EAP Application
>>(DER/DEA) or we
>>> >>>>define a new Diameter Application.
>>> >>>>
>>> >>>> If we use a new Diameter Application, a new Diameter
>>> >>session will be
>>> >>>>created and eventually a new Diameter server will be
>>reached. What
>>> >>>>bothers me in this case is that we basically perform a
>>> >>>>reauthentication for the same session which is primarly
>>> >>handled at the
>>> >>>>AAA/EAP server. So, i'm wondering what happens concerning
>>> >>>>Authorization Lifetime session etc..
>>> >>>>
>>> >>>> Note that I still don't have strong opinion and I'll be
>>> >>glad to hear
>>> >>>>opinions from others.
>>> >>>>
>>> >>>> Regards,
>>> >>>>
>>> >>>> Julien
>>> >>>>_______________________________________________
>>> >>>>DiME mailing list
>>> >>>>DiME@ietf.org
>>> >>>>https://www.ietf.org/mailman/listinfo/dime
>>> >>>>
>>> >>>
>>> >>>
>>> >>
>>> >
>>> >
>>> _______________________________________________
>>> DiME mailing list
>>> DiME@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dime
>>
>>_______________________________________________
>>HOKEY mailing list
>>HOKEY@ietf.org
>>https://www.ietf.org/mailman/listinfo/hokey
>>
>
> _______________________________________________
> HOKEY mailing list
> HOKEY@ietf.org
> https://www.ietf.org/mailman/listinfo/hokey
>

From Hannes.Tschofenig@gmx.net  Thu Mar 12 03:05:18 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 388BD3A690A for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:05:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.358
X-Spam-Level: 
X-Spam-Status: No, score=-2.358 tagged_above=-999 required=5 tests=[AWL=0.241,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LPoKmqAql9LU for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:05:17 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id C13CD3A68F7 for <dime@ietf.org>; Thu, 12 Mar 2009 03:05:16 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 10:05:52 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp067) with SMTP; 12 Mar 2009 11:05:52 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1+fIh5oX3ifLgjVzooEvxoAl3K9HDRai9rdmpLC4g z+3rQXRkkPxHnF
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Qin Wu'" <sunseawq@huawei.com>, "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net> <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com>
Date: Thu, 12 Mar 2009 12:07:00 +0200
Message-ID: <096e01c9a2fa$49406350$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com>
Thread-Index: Acmi9TlfUQRcAX1iTFqow0Y2E4EzzQABIAJA
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.52
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 10:05:18 -0000

Hi Qin, 

>Hi:
>If my understanding is correct, the ERP re-authentication with 
>a AAA server through a Hokey server will happen in the intial 
>EAP exchange or in  the bootstrapping phase.

If I understood Glen correctly so far then this is not the model. 
The Diameter (or RADIUS signaling for that matter) messages are not routed
through the HOKEY server but the AAA entities interact with the HOKEY
server(s) using some other protocol mechanism. To me that sounded like a
reasonable approach. 

>e.g., when the peer firstly enter into one visited AAA domain 
>away from the home AAA server, intial EAP exchange between the 
>peer and home AAA server is required.

Are you talking now about the regular Diameter EAP exchange. 

>  However when the peer 
>move between two adjacent authenticator within the same AAA 
>domain,  the ERP re-authentication does not happen with a AAA 
>server but with a local hokey server which is a optimized 
>approach to reduce handoff latency.
Currently, this is the HOKEY re-authentication exchange. 

Ciao
Hannes

>
>Best Regards!
>-Qin
>----- Original Message -----
>From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
>To: "'Julien Bournelle'" <julien.bournelle@gmail.com>; "'Qin 
>Wu'" <sunseawq@huawei.com>
>Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; 
><hokey@ietf.org>
>Sent: Thursday, March 12, 2009 5:13 PM
>Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or 
>not ?(non-roaming case)
>
>
>> 
>>> 1/ re-uses full EAP authentication with Diameter EAP
>> 
>>> 2/ perform a reauthentication using ERP.
>> 
>>> If we use 2/, and we have a new Diameter ERP app-id, a 
>>>distinct AAA server may be reached. 
>> 
>> If I understood Glen correctly from previous conversations 
>then the Diameter
>> ERP re-authentication does not happen with a AAA server but 
>with a HOKEY
>> server. Hence, I am not sure that there is an issue. 
>> 
>> Ciao
>> Hannes
>>
>


From Hannes.Tschofenig@gmx.net  Thu Mar 12 03:08:31 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A75443A690A for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:08:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.361
X-Spam-Level: 
X-Spam-Status: No, score=-2.361 tagged_above=-999 required=5 tests=[AWL=0.238,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qFn5ToylydL9 for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:08:26 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id C8C5A3A689C for <dime@ietf.org>; Thu, 12 Mar 2009 03:08:25 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 10:09:02 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp062) with SMTP; 12 Mar 2009 11:09:02 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/x2wB7tYbxi4YJoHmPYd7yEiFdnMOyq6TH2qazla /+7YJCcxVTS7MW
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net> <5e2406980903120249x4643ca89wecef7761332c4da5@mail.gmail.com>
Date: Thu, 12 Mar 2009 12:10:09 +0200
Message-ID: <096f01c9a2fa$ba27bd20$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <5e2406980903120249x4643ca89wecef7761332c4da5@mail.gmail.com>
Thread-Index: Acmi9+bTz2/AIMxSSr6J6t44XICJLwAAnwEw
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.65
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 10:08:31 -0000

Hi Julien, 

>Hi hannes,
>
>On Thu, Mar 12, 2009 at 10:13 AM, Hannes Tschofenig 
><Hannes.Tschofenig@gmx.net> wrote:
>>
>>> 1/ re-uses full EAP authentication with Diameter EAP
>>
>>> 2/ perform a reauthentication using ERP.
>>
>>> If we use 2/, and we have a new Diameter ERP app-id, a distinct AAA 
>>>server may be reached.
>>
>> If I understood Glen correctly from previous conversations then the 
>> Diameter ERP re-authentication does not happen with a AAA server but 
>> with a HOKEY server. Hence, I am not sure that there is an issue.
>
> yes, you're right. But for me a HOKEY server is like an EAP 
>server. It may be collocated or not with a AAA server but the 
>NAS uses Diameter protocol so the message is a AAA message 
>which is going to reach a AAA server (colocated or not with an 
>HOKEY server).
Maybe that's just a terminology issue but it causes confusion regarding the
way how the messages are routed. 
In DIME we had this discussion regarding the routing of messages and Glen
clarified these aspects. 

I would also think it is extremely important to put a sort of architecture
picture in the Diameter ERP document that illustrates how the messages are
routed and how the entities relate to each other so that we aren't always
talking past each other. 

Ciao
Hannes

>
> Not that I was not pointing this as an issue.
>
>
> Regards,
>
> Julien
>
>>
>> Ciao
>> Hannes
>>
>>
>


From Hannes.Tschofenig@gmx.net  Thu Mar 12 03:44:49 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4D75F3A690A for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:44:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.063
X-Spam-Level: 
X-Spam-Status: No, score=-2.063 tagged_above=-999 required=5 tests=[AWL=-0.064, BAYES_00=-2.599, J_CHICKENPOX_33=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AXjRgO5SkQM3 for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:44:49 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id ABD773A68DF for <dime@ietf.org>; Thu, 12 Mar 2009 03:44:48 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 10:38:44 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp042) with SMTP; 12 Mar 2009 11:38:44 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18xV2Ahoxox971u1/krU6ee1BCBXf4DCQ2A1nD8v+ E/k7XntBk72lrB
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Qin Wu'" <sunseawq@huawei.com>, "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com>
Date: Thu, 12 Mar 2009 12:39:51 +0200
Message-ID: <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com>
Thread-Index: Acmi+ItVZcHzzktZSJOQdqp74Ht36gAAmFbw
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.57
Cc: dime@ietf.org, hokey@ietf.org
Subject: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 10:44:49 -0000

The figures in http://www.ietf.org/rfc/rfc5296.txt are pretty confusing. 

For example, Figure 2 talks about a 'server' rather than saying that this is
the ERP server. 

Figure 3 is even more confusing as it shows a standard EAP exchange but then
has a ER server in there. 

  Peer        EAP Authenticator     Local ER Server     Home EAP Server
   ====        =================     ===============     ===============

   <-- EAP-Request/ --
        Identity

   -- EAP Response/-->
        Identity      --AAA(EAP Response/-->
                            Identity)       --AAA(EAP Response/ -->
                                                      Identity,
                                                [DSRK Request,
                                              domain name])

   <------------------------ EAP Method exchange------------------>

                                            <---AAA(MSK, DSRK, ----
                                                   EMSKname,
                                                 EAP-Success)

                       <---  AAA(MSK,  -----
                            EAP-Success)

   <---EAP-Success-----

            Figure 3: Local ERP Exchange, Initial EAP Exchange 

I think that the figures have to look like: 

============================================================================
=======

   EAP Peer           Diameter EAP Client               EAP Server
   ========           =================                 ==========

    <--- EAP-Request/ ------
            Identity

    ----- EAP Response/ --->
            Identity          ---AAA(EAP Response/Identity)-->

    <--- EAP Method ------->  <------ AAA(EAP Method -------->
           exchange                    exchange)

                              <----AAA(MSK, EAP-Success)------

    <---EAP-Success---------

                       Figure 1: EAP Authentication

[This figure does not have any ERP stuff in there. That does not seem to be
right or at least not relevant then.]


   Peer               Diameter ERP Client                ERP Server
   ====               =============                      ======

    [<-- EAP-Initiate/ -----
        Re-auth-Start]
    [<-- EAP-Request/ ------
        Identity]


    ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
          Re-auth/                  Re-auth/
         [Bootstrap]              [Bootstrap])

    <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
          Re-auth/                   Re-auth/
        [Bootstrap]                [Bootstrap])

   Note: [] brackets indicate optionality.

                          Figure 2: ERP Exchange


[New Diameter ERP application in action.]


 Peer        Diameter ERP/EAP      Local EAP Proxy/    Home EAP/ERP
 ====        =====Client======     ===ERP server==     ====Server=====

 <-- EAP-Request/ --
      Identity

 -- EAP Response/-->
      Identity      --AAA(EAP Response/-->
                          Identity)       --AAA(EAP Response/ -->
                                                    Identity,
                                              [DSRK Request,
                                            domain name])

 <------------------------ EAP Method exchange------------------>

                                          <---AAA(MSK, [DSRK, ----
                                                 EMSKname],
                                               EAP-Success)

                     <---  AAA(MSK,  -----
                          EAP-Success)

 <---EAP-Success-----

            Figure 3: Local ERP Exchange, Initial EAP Exchange




[Here we assume that there is some communication going on between the
Diameter EAP proxy and the ERP server in the local network. 
For editorial reasons we do not show the two entities separately but maybe
we should. The same is true for the Diameter EAP server and the ERP server.

Graphically, this could be shown as: 



  Diameter EAP +-------------+   Diameter EAP   +-------------+
               |             |                  |             |
 <------------>| Local       |<---------------->| Home        |
               | Diameter    |                  | Diameter    |
               | EAP Proxy   |                  | EAP Server  |
               |             |                  |             |
               +-------------+                  +-------------+
                      ^                                ^
                   (a)| proprietary        proprietary |(b)
                      v                                v
               +-------------+                  +-------------+
  Diameter ERP |             |    Diameter ERP  |             |
               | Local       |                  |  Home       |
 <------------>| Diameter    |<---------------->|  Diameter   |
               | ERP Server  |                  |  ERP Server |
               |             |                  |             |
               +-------------+                  +-------------+

It might be useful to say what information is exchanged at (a) and (b) and
when in the protocol exchange.

]

   Peer                ER Authenticator            Local ER Server
   ====                ================            ===============

   [<-- EAP-Initiate/ --------
        Re-auth-Start]
   [<-- EAP-Request/ ---------
        Identity]

    ---- EAP-Initiate/ -------> ----AAA(EAP-Initiate/ -------->
          Re-auth                        Re-auth)

    <--- EAP-Finish/ ---------- <---AAA(rMSK,EAP-Finish/-------
          Re-auth                        Re-auth)

                       Figure 4: Local ERP Exchange

[Is this figure from a Diameter ERP routing the same as Figure 2?]


So, I suggest to get the high level messaing right before starting with the
details

Ciao
Hannes


From jouni.nospam@gmail.com  Thu Mar 12 03:52:52 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 06CDF3A687C for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:52:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dRsaI-q2haXV for <dime@core3.amsl.com>; Thu, 12 Mar 2009 03:52:50 -0700 (PDT)
Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.24]) by core3.amsl.com (Postfix) with ESMTP id EC94A3A6A93 for <dime@ietf.org>; Thu, 12 Mar 2009 03:52:49 -0700 (PDT)
Received: by ey-out-2122.google.com with SMTP id 25so100611eya.31 for <dime@ietf.org>; Thu, 12 Mar 2009 03:53:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=5Q/ls1QavP1nBN9WvGXmVhfdpZ6Zpzp+4f+TE3+ubQ4=; b=KwU2zhU+HqS0vA5oojZ9fjSvM137JeYfR5I8GrLD4wGQA74DvunZQvy2C4Kzl8Zu7C Y5VCnGNd12SqPdfX8/zM5U2207GXGqYc25MQKjW4FwSgZZRbEwpLvJLOz07zG9Pw7xbY y6qnF/es64jRcQiF/q0FJayuOCHKRLbFqitfQ=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=mu9a491ui4s/llwYFBc4COX3xqmqcvB4bfhD0NNFCCKXjD5Px/lbTDM/XAyE2Jvth4 TWOk/yEZUGQK7KgdfBFihkqg2JH/L6R97/HEQYvoQy91CPxr1nTHbCAYNQqAiO/nUHq+ eRhytHlZaW5TYgKeqhBwDY2d9FNmCsnCsSQms=
Received: by 10.216.8.209 with SMTP id 59mr3942174wer.18.1236855206344; Thu, 12 Mar 2009 03:53:26 -0700 (PDT)
Received: from a83-245-213-158.elisa-laajakaista.fi (a83-245-213-158.elisa-laajakaista.fi [83.245.213.158]) by mx.google.com with ESMTPS id 34sm927375nfu.37.2009.03.12.03.53.24 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 12 Mar 2009 03:53:26 -0700 (PDT)
Message-Id: <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Avi Lior <avi@bridgewatersystems.com>
In-Reply-To: <AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Thu, 12 Mar 2009 12:53:23 +0200
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com> <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com> <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com> <AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com>
X-Mailer: Apple Mail (2.930.3)
Cc: Mark Jones <Mark.Jones@bridgewatersystems.com>, Lionel.morand@orange-ftgroup.com, dime@ietf.org
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 10:52:52 -0000

I had some more thoughts around Avi's proposal and made a small  
summary and comparison of pros & cons. NAIdime means the solution  
proposed in the Dime draft. NAIavi is Avi's proposal.

1) All intermediates and peers support their own proposed solutions and
    no new application
    - Both NAIdime & NAIavi work fine

2) Some intermediates do not support NAI decoration, the destination  
Diameter server
    supports NAI decoration and no new application
    - NAIdime causes an "early" consumption of the request, which would
      cause the auth/authz fail in all realistic situations
    - NAIavi would cause a routing loop and auth/authz to fail in all  
realistic
      situations. However, this applies only if there are more than  
one intermediate
      realms and the non-supporting realm is not next to the final  
destination.

3) Some intermediates do not support NAI decoration, the destination  
Diameter server
    does not support NAI decoration and no new application
    - NAIdime has the same issue as in 2)
    - NAIavi auth/authz probably fails as the User-Name does not  
correspond to the
      user identity (it is still decorated). This depends on the used  
auth/authz
      method though.

4) Some intermediates do not support NAI decoration, the destination  
Diameter server
    supports NAI decoration, new application
    - Both NAIdime & NAIavi work ok (non-supporting agents get bypassed)

5) Some intermediates do not support NAI decoration, the destination  
Diameter server
    does not supports NAI decoration, new application
    - not applicable

6) Routing "processing" in an agent that supports NAI routing
    - NAIdime modifies both User-Name and Destination-realm. Final
      routing decision still based on Destination-Realm+Application-id  
as
      defined in unmodified rfc3588.
    - NAIavi modifies only the User-Name. Final routing decision needs
      modifications to rfc3588 request routing as sometimes the routing
      is done based on the User-Name+Application-id and sometimes based
      on the Destination-Realm+Application-id.


DId I miss some scenario? Or did I get some scenario wrong?

Summarizing the above:

1) is trivial and probably the desired deployment scenario.
4) NAI routing coupled with a new application is the safe choice. Both
    NAIdime & NAIavi always work OK.
3) is a valid scenario where both NAIdime & NAIavi have issues. NAIavi
    has probably less issues depending on the used auth/authz method.
2) here NAIavi has an advantage. From a protocol point of view it is  
not ok to
    define a solution that is known to break in other than a naive  
deployment
    scenario. From a practical point of view, I think the naive  
deployment
    scenario is probably what gets deployed in real life. However, one
    could never be sure.
6) NAIavi probably requires more code changes in the existing rfc3588  
code base.
    This could be a theoretical disadvantage though. I cannot really  
judge
    the amount of work required in other's products.

So.. comments? Honestly, I tried to be objective ;)

Cheers,
	Jouni



On Mar 11, 2009, at 12:38 AM, jouni wrote:

> Hi Avi,
>
> Thanks for the valuable input. See some comments inline.
>
> On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:
>
>> I have inline comments as well as new comment:
>>
>> The over arching problem as I see it is that when you read the  
>> document, at least the introduction and abstract you get the sense  
>> that the draft is intending to fix base diameter behavior.
>
> That is the intent.
>
>>
>> But in responses I get, I get the feeling that the intent is really  
>> to have an Application based routing scheme using NAI.
>>
>
> Applications are recommended for cases where the requests pass  
> through realms/networks where one cannot always claim that "all my  
> agents implement RFC3588 + RFC-NAI-Routing". If you know that your  
> networks support RFC3588 + RFC-NAI-Routing, there is no need to go  
> for a new application. Section 4.3 is a recommendation for backwards  
> compatibility.
>
>
>>
>> If you are trying to fix base then we need a robust backwards  
>> compatible way of doing things.  As well, we can argue whether or  
>> not it should be placed in DIME.  There is more work to do.
>
> We at least seem to agree that something needs to be done ;)
>
>>
>> If you are trying to write a document that describes how one would  
>> do Application routing using NAI. Then that does not belong in base  
>> so we should stop debating that.  And actually in this case what  
>> you are doing is fine and you are probably there.
>>
>> So which is it?  And once we pick we should be clear in the text.
>
> Definitely this is not about doing only application routing using  
> NAI. One of the goals is to be able to request a vendor e.g. "give  
> me an agent that implements RFC3588/RFC-NAI-Routing", without being  
> more specific on applications.
>
> I reread Sections 4.1-4.2. Which parts are unclear? I am happy to  
> reword.
>
>>
>> We could come up with a hybrid solution by the way.
>>
>> If the priority is to make sure that the packet gets to the  
>> destination, then:
>> You set the destination-realm to the final destination and  
>> intermediaries that support decorated NAI use the decorated NAI  
>> without modification to the destination-realm.  Intermediaries that  
>> don't know about decorated NAI will just perform the destination- 
>> realm routing.  As you point out you get looping but its not  
>> infinite looping.  At least the message would get to the final  
>> destination.
>
> The agent would send an error indicating a routing loop and then the  
> agent MAY try an alternate route.. which would result another  
> routing loop. I see no way out of this.
>
>>
>>
>> If NAI routing is the most important thing then you set the  
>> destination-realm to the next hop of the Decorated NAI.  Each hop  
>> that supports this scheme will use the decorated-nai and will  
>> update the realm.  If a hop is reached that does not understand  
>> decorated NAI then the packet will be consumed locally.
>>
>>
>>
>> Please see inline for more comments
>>
>>> -----Original Message-----
>>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
>>> Sent: March 3, 2009 5:44 PM
>>> To: Avi Lior
>>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;
>>> tena@huawei.com; Hannes.Tschofenig@gmx.net; dime@ietf.org
>>> Subject: Re: Dime NAI Routing
>>>
>>> Hi Avi,
>>>
>>> Thanks for reading & commenting the I-D.
>>>
>>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
>>>
>>>> A couple of comments:
>>>>
>>>> 1)  The draft should mention something about the presence of
>>>> Destination-Host AVP.
>>>>
>>>> The rule for routing is that the Destination-Host AVP is
>>> not looked at
>>>> until the message reaches the terminal realm as determined by the
>>>> decorated NAI.
>>>
>>> Where you would suggest to include the clarifying text? In
>>> Section 4.2.?
>>
>> I don't know.  I will have to look at the draft. This is really a  
>> side issue and depends on the intent of the draft.
>
> Ok.
>
>>
>>
>>>
>>>
>>>> 2) I dont like the way Destination-Realm is being used.
>>>>
>>>> The draft states that the destination realm is updated on a
>>> hop by hop
>>>> basis together with the decorated NAI.
>>>
>>> I assume that is the only way to ensure the request message
>>> really goes through all wanted realms.
>>
>> Correct.  And in some cases NAI routing is going to be more  
>> important and in some cases it will be more important to make sure  
>> the message makes it all the way.
>>
>>>
>>>> If an intermediary is not compliant with the scheme
>>> presented by this
>>>> draft it will result in the intermediary consuming the
>>> message locally
>>>> - since the message contains the destination realm equal to
>>>> its realm.   Thus the message is not going to reach the  
>>>> destination.
>>>
>>> That is the reason why the I-D suggests only using the
>>> decoration stuff with a new application that is known to
>>> support this I-D. In that way legacy agents can be bypassed.
>>
>> Okay so here you are clear this is Application based routing.
>
> This is suggested/recommended only when there is no guarantee that  
> all agents implement the NAI routing. To my understanding all  
> Diameter routing is based on applications + realms anyway, so I  
> don't see the problem.
>
>>
>>>>
>>>> Instead, I propose that the destination realm should be
>>> always set to
>>>> the terminal realm, thus:
>>>>
>>>> Agents that are compliant with the draft will first look at
>>> the NAI to
>>>> determine whether the packet has reached the terminal realm
>>> or where
>>>> it should be routed next;
>>>
>>> Are you proposing to make the routing decision based on the
>>> User-Name (and ignore the Destination-Realm all together) in
>>> cases where 1) the agent supports this I-D and 2) the
>>> User-Name contains a decorated NAI?
>>> Once the decorated NAI would have been "consumed" the
>>> checking would be based on the Destination-Realm again..?
>>
>> Almost. In the case where you want to guarantee packet delivery  
>> irrespective of whether nodes are compliant with this draft, then  
>> you set the destination-realm to the final destination of the  
>> decorated NAI.  Agents that support your scheme would use the  
>> decorated NAI to determine how to route to the next hop.  Agents  
>> that don't support your scheme will use the destination-realm to  
>> determine how to route to the next hop (they will ignore the  
>> decorated NAI).
>
> Ok. That was close enough to my understanding ;) So, the route  
> decision would be:
>
> 1) case NAI routing supported:
>   route decision: User-Name + Application
>   if User-Name's @realm matches agent's own realm, precess the NAI
>
> 2) case normal RFC3588
>   route decision: Destination-Realm + Application
>   Modify: none
>
> right?
>
>
>>
>>
>>>> Agents that are not compatible with the draft will use the
>>> old rules
>>>> for routing and would route the message according to the
>>> destination-
>>>> realm only and thus the message will reach the final destintaion
>>>> albeit not necessarily according to the decorated NAI. But
>>> at least it
>>>> would work.
>>>>
>>>>
>>>> Did I miss anything?
>>>
>>> What happens if.. the route happens to have some
>>> non-compliant agents and when the request reaches its final
>>> end (e.g. according to the inter-connection architecture) the
>>> User-Name still has decorated NAI?
>>> Would the decorated NAI compliant server/proxy send to
>>> request back to some other realm pointed by the User-name?
>>> This would effectively cause a routing loop, right?
>> No. It may cause a loop but it wont be an infinite loop.  So it  
>> depends, in some cases I may be okay with have strange routing but  
>> I will at least get the packet there. So it depends what I want to  
>> achieve.
>
> There is no guarantee that the alternate route selected by the agent  
> that discovered the loop would result to any better outcome. The  
> alternate route could again route traffic back.
>
> Cheers,
> 	Jouni
>
>>
>>
>>>
>>> Cheers,
>>>       Jouni
>>>
>>>
>>>
>>>>
>>>>
>>>
>>>
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime


From sunseawq@huawei.com  Thu Mar 12 04:01:48 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5CE413A687C; Thu, 12 Mar 2009 04:01:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.498
X-Spam-Level: 
X-Spam-Status: No, score=-1.498 tagged_above=-999 required=5 tests=[AWL=1.101,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nzqQ1eeDoXOV; Thu, 12 Mar 2009 04:01:47 -0700 (PDT)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 3E6613A6403; Thu, 12 Mar 2009 04:01:47 -0700 (PDT)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00J3K3ZXDQ@szxga04-in.huawei.com>; Thu, 12 Mar 2009 19:02:21 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00GLB3ZXMO@szxga04-in.huawei.com>; Thu, 12 Mar 2009 19:02:21 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGE00D523ZXDN@szxml05-in.huawei.com>; Thu, 12 Mar 2009 19:02:21 +0800 (CST)
Date: Thu, 12 Mar 2009 19:02:20 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>, 'Julien Bournelle' <julien.bournelle@gmail.com>
Message-id: <055601c9a302$03dcbdb0$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net> <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com> <096e01c9a2fa$49406350$0201a8c0@nsnintra.net>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 11:01:48 -0000

Hi, Hannes:
Thank for your reply. please see inline.
-Qin
----- Original Message ----- 
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Qin Wu'" <sunseawq@huawei.com>; "'Julien Bournelle'" <julien.bournelle@gmail.com>
Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
Sent: Thursday, March 12, 2009 6:07 PM
Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roaming case)


> Hi Qin, 
> 
>>Hi:
>>If my understanding is correct, the ERP re-authentication with 
>>a AAA server through a Hokey server will happen in the intial 
>>EAP exchange or in  the bootstrapping phase.
> 
> If I understood Glen correctly so far then this is not the model. 
> The Diameter (or RADIUS signaling for that matter) messages are not routed
> through the HOKEY server but the AAA entities interact with the HOKEY
> server(s) using some other protocol mechanism. To me that sounded like a
> reasonable approach. 

[Qin]  I agree it is a good way to make AAA entities interact with Hokey server using existing mechanism.
As regarding whether hokey server can be viewed as proxy AAA or an independent ER server, I am not sure. Maybe this is what DiME ERP 
needs to find out or define.

>>e.g., when the peer firstly enter into one visited AAA domain 
>>away from the home AAA server, intial EAP exchange between the 
>>peer and home AAA server is required.
> 
> Are you talking now about the regular Diameter EAP exchange. 

[Qin]  It is not regualr Diameter EAP exchange but ERP for intial EAP exchange.
As regarding ERP for intial EAP exchange, please refer to the figure 3 of RFC5296.

>>  However when the peer 
>>move between two adjacent authenticator within the same AAA 
>>domain,  the ERP re-authentication does not happen with a AAA 
>>server but with a local hokey server which is a optimized 
>>approach to reduce handoff latency.
> Currently, this is the HOKEY re-authentication exchange. 

[Qin] You understanding is correct.

> Ciao
> Hannes
> 
>>
>>Best Regards!
>>-Qin
>>----- Original Message -----
>>From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
>>To: "'Julien Bournelle'" <julien.bournelle@gmail.com>; "'Qin 
>>Wu'" <sunseawq@huawei.com>
>>Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; 
>><hokey@ietf.org>
>>Sent: Thursday, March 12, 2009 5:13 PM
>>Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or 
>>not ?(non-roaming case)
>>
>>
>>> 
>>>> 1/ re-uses full EAP authentication with Diameter EAP
>>> 
>>>> 2/ perform a reauthentication using ERP.
>>> 
>>>> If we use 2/, and we have a new Diameter ERP app-id, a 
>>>>distinct AAA server may be reached. 
>>> 
>>> If I understood Glen correctly from previous conversations 
>>then the Diameter
>>> ERP re-authentication does not happen with a AAA server but 
>>with a HOKEY
>>> server. Hence, I am not sure that there is an issue. 
>>> 
>>> Ciao
>>> Hannes
>>>
>>
>

From sunseawq@huawei.com  Thu Mar 12 04:15:05 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E321B3A6BB5; Thu, 12 Mar 2009 04:15:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.539
X-Spam-Level: 
X-Spam-Status: No, score=-1.539 tagged_above=-999 required=5 tests=[AWL=1.060,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZywj9ZoDL0I; Thu, 12 Mar 2009 04:15:05 -0700 (PDT)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id CCEF13A6BB3; Thu, 12 Mar 2009 04:15:04 -0700 (PDT)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00HX14M44U@szxga04-in.huawei.com>; Thu, 12 Mar 2009 19:15:40 +0800 (CST)
Received: from huawei.com ([172.24.1.33]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00CFR4M402@szxga04-in.huawei.com>; Thu, 12 Mar 2009 19:15:40 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGE0000B4M3UZ@szxml06-in.huawei.com>; Thu, 12 Mar 2009 19:15:40 +0800 (CST)
Date: Thu, 12 Mar 2009 19:15:38 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Julien Bournelle <julien.bournelle@gmail.com>
Message-id: <05c001c9a303$dfa5e370$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <096601c9a2f2$d451b640$0201a8c0@nsnintra.net> <04d901c9a2f5$35f92f20$1b0ca40a@china.huawei.com> <5e2406980903120253p68f5e4aen7223c606716110c8@mail.gmail.com>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not ?(non-roamingcase)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 11:15:06 -0000

I agree, to my knowledge, the hokey server plays the AAA part. In the RFC 5296, it should be ER server for ERP if my understanding is correct.
----- Original Message ----- 
From: "Julien Bournelle" <julien.bournelle@gmail.com>
To: "Qin Wu" <sunseawq@huawei.com>
Cc: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>; "Glen Zorn" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
Sent: Thursday, March 12, 2009 5:53 PM
Subject: Re: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roamingcase)


Hi Qin,

On Thu, Mar 12, 2009 at 10:30 AM, Qin Wu <sunseawq@huawei.com> wrote:
> Hi:
> If my understanding is correct, the ERP re-authentication with a AAA server through a Hokey server will happen in the intial EAP exchange or in the bootstrapping phase.
> e.g., when the peer firstly enter into one visited AAA domain away from the home AAA server, intial EAP exchange between the peer and home AAA server is required. However when the peer move between two adjacent authenticator within the same AAA domain, the ERP re-authentication does not happen with a AAA server but with a local hokey server which is a optimized approach to reduce handoff latency.

 hmm, same comment as for hannes. The local hokey server has a AAA
part (colocated or not). We are using a AAA protocol between the NAS
and the HOKEY server, so by extension, the HOKEY server as a AAA part
(colocated or not).

 Regards,

 Julien

>
> Best Regards!
> -Qin
> ----- Original Message -----
> From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
> To: "'Julien Bournelle'" <julien.bournelle@gmail.com>; "'Qin Wu'" <sunseawq@huawei.com>
> Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
> Sent: Thursday, March 12, 2009 5:13 PM
> Subject: RE: [HOKEY] [Dime] DiME ERP: new Application ID or not ?(non-roaming case)
>
>
>>
>>> 1/ re-uses full EAP authentication with Diameter EAP
>>
>>> 2/ perform a reauthentication using ERP.
>>
>>> If we use 2/, and we have a new Diameter ERP app-id, a
>>>distinct AAA server may be reached.
>>
>> If I understood Glen correctly from previous conversations then the Diameter
>> ERP re-authentication does not happen with a AAA server but with a HOKEY
>> server. Hence, I am not sure that there is an issue.
>>
>> Ciao
>> Hannes
>>
>

From sdecugis@nict.go.jp  Thu Mar 12 04:44:24 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BF2813A6857; Thu, 12 Mar 2009 04:44:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level: 
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KiAUVX9TrmNd; Thu, 12 Mar 2009 04:44:23 -0700 (PDT)
Received: from sd-1637.dedibox.fr (sd-1637.dedibox.fr [88.191.18.91]) by core3.amsl.com (Postfix) with ESMTP id 8D4D63A6837; Thu, 12 Mar 2009 04:44:23 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by sd-1637.dedibox.fr (Postfix) with ESMTP id CB1A6A3D0A; Thu, 12 Mar 2009 12:44:59 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at sd-1637.dedibox.fr
Received: from sd-1637.dedibox.fr ([127.0.0.1]) by localhost (sd-1637.dedibox.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wFelxj9SVxu9; Thu, 12 Mar 2009 12:44:56 +0100 (CET)
Received: from [172.16.1.190] (unknown [203.178.159.146]) by sd-1637.dedibox.fr (Postfix) with ESMTPSA id 5E4EBA3D09; Thu, 12 Mar 2009 12:44:55 +0100 (CET)
Message-ID: <49B8F5AA.4010703@nict.go.jp>
Date: Thu, 12 Mar 2009 20:44:42 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>	<04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
In-Reply-To: <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 11:44:24 -0000

Hi,

Hannes Tschofenig a écrit :
>   Diameter EAP +-------------+   Diameter EAP   +-------------+
>                |             |                  |             |
>  <------------>| Local       |<---------------->| Home        |
>                | Diameter    |                  | Diameter    |
>                | EAP Proxy   |                  | EAP Server  |
>                |             |                  |             |
>                +-------------+                  +-------------+
>                       ^                                ^
>                    (a)| proprietary        proprietary |(b)
>                       v                                v
>                +-------------+                  +-------------+
>   Diameter ERP |             |    Diameter ERP  |             |
>                | Local       |                  |  Home       |
>  <------------>| Diameter    |<---------------->|  Diameter   |
>                | ERP Server  |                  |  ERP Server |
>                |             |                  |             |
>                +-------------+                  +-------------+
>
> It might be useful to say what information is exchanged at (a) and (b) and
> when in the protocol exchange.
>   
I agree with this figure -- I mean, it reflects my current understanding
of the architecture.
In my understanding of Glen's explanation during Interim Meeting, there
would be a "HOKEY server" as a separate entity, and both the local
Diameter EAP Proxy and ERP proxy talk to this HOKEY server using this
proprietary protocol (a).

Note that the proprietary exchange (a) with EAP proxy is necessary only
for implicit bootstrapping, which as you know I believe should be avoided.

Best regards,
Sebastien.

From sdecugis@nict.go.jp  Thu Mar 12 04:48:40 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 72FA53A688F; Thu, 12 Mar 2009 04:48:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level: 
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6houbRgKfXah; Thu, 12 Mar 2009 04:48:39 -0700 (PDT)
Received: from sd-1637.dedibox.fr (sd-1637.dedibox.fr [88.191.18.91]) by core3.amsl.com (Postfix) with ESMTP id B460F3A6901; Thu, 12 Mar 2009 04:48:39 -0700 (PDT)
Received: from localhost (localhost.localdomain [127.0.0.1]) by sd-1637.dedibox.fr (Postfix) with ESMTP id C390CA3D09; Thu, 12 Mar 2009 12:49:16 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at sd-1637.dedibox.fr
Received: from sd-1637.dedibox.fr ([127.0.0.1]) by localhost (sd-1637.dedibox.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GGT4XevMLqRl; Thu, 12 Mar 2009 12:49:14 +0100 (CET)
Received: from [172.16.1.190] (unknown [203.178.159.146]) by sd-1637.dedibox.fr (Postfix) with ESMTPSA id D5432A3D08; Thu, 12 Mar 2009 12:49:12 +0100 (CET)
Message-ID: <49B8F6AC.7010905@nict.go.jp>
Date: Thu, 12 Mar 2009 20:49:00 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Julien Bournelle <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com>
In-Reply-To: <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not	?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 11:48:40 -0000

Hi,

Julien Bournelle a écrit :
>  Basically I don't think we can use ERP here because if the MSK, EMSK
> lifetime expires, 

I have a couple of questions related to this, I could not find the
answer yet:

- Do MSK and EMSK have the same lifetime?
- Do the peer and the server agree on the lifetime(s) of these keys
during EAP exchange?

Sorry if these are trivial questions... I believe anyway they are
important to help understanding the issue raised here.

Best regards,
Sebastien.

From sunseawq@huawei.com  Thu Mar 12 05:27:15 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE96128C100; Thu, 12 Mar 2009 05:27:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.276
X-Spam-Level: 
X-Spam-Status: No, score=-1.276 tagged_above=-999 required=5 tests=[AWL=0.723,  BAYES_00=-2.599, J_CHICKENPOX_33=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lPoMasBgrxdL; Thu, 12 Mar 2009 05:27:10 -0700 (PDT)
Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id 83D8B3A6973; Thu, 12 Mar 2009 05:27:09 -0700 (PDT)
Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE006SD7Y8YJ@szxga04-in.huawei.com>; Thu, 12 Mar 2009 20:27:45 +0800 (CST)
Received: from huawei.com ([172.24.1.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGE00GNO7Y8MO@szxga04-in.huawei.com>; Thu, 12 Mar 2009 20:27:44 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGE00M7J7Y8AV@szxml05-in.huawei.com>; Thu, 12 Mar 2009 20:27:44 +0800 (CST)
Date: Thu, 12 Mar 2009 20:27:43 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>, 'Julien Bournelle' <julien.bournelle@gmail.com>
Message-id: <065101c9a30d$f1e3f2c0$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 12:27:15 -0000

Hi, Hannes:
Let me try to answer the question you rasised.
-Qin
----- Original Message ----- 
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Qin Wu'" <sunseawq@huawei.com>; "'Julien Bournelle'" <julien.bournelle@gmail.com>
Cc: "'Glen Zorn'" <glenzorn@comcast.net>; <dime@ietf.org>; <hokey@ietf.org>
Sent: Thursday, March 12, 2009 6:39 PM
Subject: DiME ERP - Getting the message flows right


> The figures in http://www.ietf.org/rfc/rfc5296.txt are pretty confusing. 
> 
> For example, Figure 2 talks about a 'server' rather than saying that this is
> the ERP server. 
[Qin] Figure 2 is a high level model for ERP, so the server is a generic server, 
in the initial EAP exchange for ERP as described in figure 3, the sever can divided into two part, one is local ER server, the other is home EAP server.
in the local ERP exchange as described in figure 4, the server can be viewed as local ER server.
> Figure 3 is even more confusing as it shows a standard EAP exchange but then
> has a ER server in there. 

[Qin] I agree it is a little ambiguity. I would like to call the figure 3 as "ERP for initial EAP exchange". It is quite similar to the regular EAP authentication,
what's the difference with regular EAP authentication is that the figure 3 is applicable for some certain use cases where the peer moves across the different visited AAA domain and it is first time for the peer to enter into one new AAA domain. In this scenarios, the keying materials between the peer and the authenticator to which the peer firstly attached in this new AAA domain needs to be re-generated.

> 
>  Peer        EAP Authenticator     Local ER Server     Home EAP Server
>   ====        =================     ===============     ===============
> 
>   <-- EAP-Request/ --
>        Identity
> 
>   -- EAP Response/-->
>        Identity      --AAA(EAP Response/-->
>                            Identity)       --AAA(EAP Response/ -->
>                                                      Identity,
>                                                [DSRK Request,
>                                              domain name])
> 
>   <------------------------ EAP Method exchange------------------>
> 
>                                            <---AAA(MSK, DSRK, ----
>                                                   EMSKname,
>                                                 EAP-Success)
> 
>                       <---  AAA(MSK,  -----
>                            EAP-Success)
> 
>   <---EAP-Success-----
> 
>            Figure 3: Local ERP Exchange, Initial EAP Exchange 
> 
> I think that the figures have to look like: 
> 
> ============================================================================
> =======
> 
>   EAP Peer           Diameter EAP Client               EAP Server
>   ========           =================                 ==========
> 
>    <--- EAP-Request/ ------
>            Identity
> 
>    ----- EAP Response/ --->
>            Identity          ---AAA(EAP Response/Identity)-->
> 
>    <--- EAP Method ------->  <------ AAA(EAP Method -------->
>           exchange                    exchange)
> 
>                              <----AAA(MSK, EAP-Success)------
> 
>    <---EAP-Success---------
> 
>                       Figure 1: EAP Authentication
> 
> [This figure does not have any ERP stuff in there. That does not seem to be
> right or at least not relevant then.]

[Qin] Figure 1 is the full EAP authentication as described in the section 3. It is not ERP.

> 
> 
>   Peer               Diameter ERP Client                ERP Server
>   ====               =============                      ======
> 
>    [<-- EAP-Initiate/ -----
>        Re-auth-Start]
>    [<-- EAP-Request/ ------
>        Identity]
> 
> 
>    ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>          Re-auth/                  Re-auth/
>         [Bootstrap]              [Bootstrap])
> 
>    <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>          Re-auth/                   Re-auth/
>        [Bootstrap]                [Bootstrap])
> 
>   Note: [] brackets indicate optionality.
> 
>                          Figure 2: ERP Exchange
> 
> 
> [New Diameter ERP application in action.]
[Qin] I agree, Bootstrapping is one scenario to explain why we need ERP?  However I wonder for the regular EAP authentication,
We also need to consider bootrapping case, is that right?
> 
> Peer        Diameter ERP/EAP      Local EAP Proxy/    Home EAP/ERP
> ====        =====Client======     ===ERP server==     ====Server=====
> 
> <-- EAP-Request/ --
>      Identity
> 
> -- EAP Response/-->
>      Identity      --AAA(EAP Response/-->
>                          Identity)       --AAA(EAP Response/ -->
>                                                    Identity,
>                                              [DSRK Request,
>                                            domain name])
> 
> <------------------------ EAP Method exchange------------------>
> 
>                                          <---AAA(MSK, [DSRK, ----
>                                                 EMSKname],
>                                               EAP-Success)
> 
>                     <---  AAA(MSK,  -----
>                          EAP-Success)
> 
> <---EAP-Success-----
> 
>            Figure 3: Local ERP Exchange, Initial EAP Exchange
> 
> 
> 
> 
> [Here we assume that there is some communication going on between the
> Diameter EAP proxy and the ERP server in the local network. 
> For editorial reasons we do not show the two entities separately but maybe
> we should. The same is true for the Diameter EAP server and the ERP server.
> 
> Graphically, this could be shown as: 
> 
> 
>  Diameter EAP +-------------+   Diameter EAP   +-------------+
>               |             |                  |             |
> <------------>| Local       |<---------------->| Home        |
>               | Diameter    |                  | Diameter    |
>               | EAP Proxy   |                  | EAP Server  |
>               |             |                  |             |
>               +-------------+                  +-------------+
>                      ^                                ^
>                   (a)| proprietary        proprietary |(b)
>                      v                                v
>               +-------------+                  +-------------+
>  Diameter ERP |             |    Diameter ERP  |             |
>               | Local       |                  |  Home       |
> <------------>| Diameter    |<---------------->|  Diameter   |
>               | ERP Server  |                  |  ERP Server |
>               |             |                  |             |
>               +-------------+                  +-------------+
> 
> It might be useful to say what information is exchanged at (a) and (b) and
> when in the protocol exchange.
> 
> ]
> 
>   Peer                ER Authenticator            Local ER Server
>   ====                ================            ===============
> 
>   [<-- EAP-Initiate/ --------
>        Re-auth-Start]
>   [<-- EAP-Request/ ---------
>        Identity]
> 
>    ---- EAP-Initiate/ -------> ----AAA(EAP-Initiate/ -------->
>          Re-auth                        Re-auth)
> 
>    <--- EAP-Finish/ ---------- <---AAA(rMSK,EAP-Finish/-------
>          Re-auth                        Re-auth)
> 
>                       Figure 4: Local ERP Exchange
> 
> [Is this figure from a Diameter ERP routing the same as Figure 2?]
> 
> 
> So, I suggest to get the high level messaing right before starting with the
> details
> 
> Ciao
> Hannes
>

From Hannes.Tschofenig@gmx.net  Thu Mar 12 07:38:25 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B42C23A6837 for <dime@core3.amsl.com>; Thu, 12 Mar 2009 07:38:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.362
X-Spam-Level: 
X-Spam-Status: No, score=-2.362 tagged_above=-999 required=5 tests=[AWL=0.237,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fk4qfTawQdqa for <dime@core3.amsl.com>; Thu, 12 Mar 2009 07:38:24 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 42C093A6A03 for <dime@ietf.org>; Thu, 12 Mar 2009 07:38:23 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 14:39:00 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp049) with SMTP; 12 Mar 2009 15:39:00 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/Dt2ITM6vDn/Nah6B4Ht+8UvZFX9VU2ABc/7uiJL 46JxFSjgMC4mhN
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Sebastien Decugis'" <sdecugis@nict.go.jp>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>	<04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net> <49B8F5AA.4010703@nict.go.jp>
Date: Thu, 12 Mar 2009 16:40:06 +0200
Message-ID: <098901c9a320$70b857a0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <49B8F5AA.4010703@nict.go.jp>
Thread-Index: AcmjB/sfGjBEXwaDR7WczPswkggntAAF/SZA
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.64
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 14:38:25 -0000

Hi Sebastien,=20

>Hi,
>
>Hannes Tschofenig a =E9crit :
>>   Diameter EAP +-------------+   Diameter EAP   +-------------+
>>                |             |                  |             |
>>  <------------>| Local       |<---------------->| Home        |
>>                | Diameter    |                  | Diameter    |
>>                | EAP Proxy   |                  | EAP Server  |
>>                |             |                  |             |
>>                +-------------+                  +-------------+
>>                       ^                                ^
>>                    (a)| proprietary        proprietary |(b)
>>                       v                                v
>>                +-------------+                  +-------------+
>>   Diameter ERP |             |    Diameter ERP  |             |
>>                | Local       |                  |  Home       |
>>  <------------>| Diameter    |<---------------->|  Diameter   |
>>                | ERP Server  |                  |  ERP Server |
>>                |             |                  |             |
>>                +-------------+                  +-------------+
>>
>> It might be useful to say what information is exchanged at=20
>(a) and (b)=20
>> and when in the protocol exchange.
>>  =20
>I agree with this figure -- I mean, it reflects my current=20
>understanding of the architecture.
>In my understanding of Glen's explanation during Interim=20
>Meeting, there would be a "HOKEY server" as a separate entity,

Separate logical entity.=20
=20
>and both the local Diameter EAP Proxy and ERP proxy talk to=20
>this HOKEY server using this proprietary protocol (a).
>
>Note that the proprietary exchange (a) with EAP proxy is=20
>necessary only for implicit bootstrapping, which as you know I=20
>believe should be avoided.
Good that you mention this. I believe that this aspect should be =
described
as well. It could be covered in a description that illustrates the =
different
stages of the ERP messaging and the variations that exist together with =
the
information that actually needs to be made available to the ERP server.=20

What is also important with respect to the message routing, which is not =
yet
covered in the current figures is that the Diameter EAP exchange is =
routed
based on that specific application ID and Diameter ERP would be routed =
on
this newly defined application ID. This is quite important to capture in
this discussion and the figure above captures this aspect in some =
fashion.=20


Ciao
Hannes

>
>Best regards,
>Sebastien.
>


From Hannes.Tschofenig@gmx.net  Thu Mar 12 07:52:38 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC3183A6BD2 for <dime@core3.amsl.com>; Thu, 12 Mar 2009 07:52:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.365
X-Spam-Level: 
X-Spam-Status: No, score=-2.365 tagged_above=-999 required=5 tests=[AWL=0.234,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3EpJWFA550tZ for <dime@core3.amsl.com>; Thu, 12 Mar 2009 07:52:38 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 372DD3A6BD1 for <dime@ietf.org>; Thu, 12 Mar 2009 07:52:38 -0700 (PDT)
Received: (qmail invoked by alias); 12 Mar 2009 14:46:35 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp055) with SMTP; 12 Mar 2009 15:46:35 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18+t74K5hA+/5t1R5KznnJzcoX2Gv6GIlwpUzXdMo +Xv3pdFAP/iIwx
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Qin Wu'" <sunseawq@huawei.com>, "'Julien Bournelle'" <julien.bournelle@gmail.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net> <065101c9a30d$f1e3f2c0$1b0ca40a@china.huawei.com>
Date: Thu, 12 Mar 2009 16:47:41 +0200
Message-ID: <099101c9a321$7fb77eb0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <065101c9a30d$f1e3f2c0$1b0ca40a@china.huawei.com>
Thread-Index: AcmjDfP7J196KxVWSLqFJ0hdQqhFgwAEtBTQ
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.65
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Mar 2009 14:52:38 -0000

Hi Qin, 

>[Qin] Figure 1 is the full EAP authentication as described in 
>the section 3. It is not ERP.

Not sure how relevant a pure EAP method exchange is. 


>
>> 
>> 
>>   Peer               Diameter ERP Client                ERP Server
>>   ====               =============                      ======
>> 
>>    [<-- EAP-Initiate/ -----
>>        Re-auth-Start]
>>    [<-- EAP-Request/ ------
>>        Identity]
>> 
>> 
>>    ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
>>          Re-auth/                  Re-auth/
>>         [Bootstrap]              [Bootstrap])
>> 
>>    <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
>>          Re-auth/                   Re-auth/
>>        [Bootstrap]                [Bootstrap])
>> 
>>   Note: [] brackets indicate optionality.
>> 
>>                          Figure 2: ERP Exchange
>> 
>> 
>> [New Diameter ERP application in action.]
>[Qin] I agree, Bootstrapping is one scenario to explain why we 
>need ERP?  However I wonder for the regular EAP authentication,
>We also need to consider bootrapping case, is that right?

We need to cover all the ERP scenarios. 

In the DIME document we don't have to explain why ERP is useful and why it
is needed. 
That info should be contained in the HOKEY documents. 


Ciao
Hannes


From sunseawq@huawei.com  Thu Mar 12 23:58:39 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 076D73A6A0A; Thu, 12 Mar 2009 23:58:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.329
X-Spam-Level: 
X-Spam-Status: No, score=0.329 tagged_above=-999 required=5 tests=[AWL=-0.929,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  MIME_BASE64_TEXT=1.753, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fe1hs7kX3DBc; Thu, 12 Mar 2009 23:58:38 -0700 (PDT)
Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 425FB3A6891; Thu, 12 Mar 2009 23:58:33 -0700 (PDT)
Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGF0045KNECYU@szxga03-in.huawei.com>; Fri, 13 Mar 2009 14:59:00 +0800 (CST)
Received: from huawei.com ([172.24.1.33]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGF009RZNECII@szxga03-in.huawei.com>; Fri, 13 Mar 2009 14:59:00 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGF00IMLNECZE@szxml06-in.huawei.com>; Fri, 13 Mar 2009 14:59:00 +0800 (CST)
Date: Fri, 13 Mar 2009 14:58:59 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Sebastien Decugis <sdecugis@nict.go.jp>, Julien Bournelle <julien.bournelle@gmail.com>
Message-id: <04b501c9a3a9$2f99f830$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: base64
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com> <49B8F6AC.7010905@nict.go.jp>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not	?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2009 06:58:39 -0000
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From behcetsarikaya@yahoo.com  Fri Mar 13 16:28:09 2009
Return-Path: <behcetsarikaya@yahoo.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 514A228C202 for <dime@core3.amsl.com>; Fri, 13 Mar 2009 16:28:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.871
X-Spam-Level: 
X-Spam-Status: No, score=-1.871 tagged_above=-999 required=5 tests=[AWL=-0.207, BAYES_00=-2.599, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, J_CHICKENPOX_33=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vfDSuHqPU8aO for <dime@core3.amsl.com>; Fri, 13 Mar 2009 16:28:09 -0700 (PDT)
Received: from web111414.mail.gq1.yahoo.com (web111414.mail.gq1.yahoo.com [67.195.15.210]) by core3.amsl.com (Postfix) with SMTP id 1F3E928C1FF for <dime@ietf.org>; Fri, 13 Mar 2009 16:28:09 -0700 (PDT)
Received: (qmail 4155 invoked by uid 60001); 13 Mar 2009 23:22:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1236986527; bh=0HYZKmdpeLgw7EjcSTwOo6B4HjNIbOLoNG/zHzsnsuo=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=aU283kgtcMlrh/uWUEobXTv+4Jyb4x6MZK/BdGIKOFdat+CwZ5/Zp2zSVRJE+o2k9VKOz3NoyMo5r4U9slB6HTZ9Ze8vEM6TlTLCA9dILJGFJ1Smf4fBdUEtuzuSEa++IJpxoYmkF96cmY7V62h9VFGTBNwHWd4EhHC9ACzH3k4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=kjhyKctyxLfDmyBg9nlEPiDpnccutA32pOGOJf6hg+sTHc1s6OijxtNVT07IAeYBMfLFyL0YYK4/JoMLiTlDCK9DYYeFdPyjpE0rr0FCzLSsrnOzQTtYSCiBnwvOR7LpUG7Kys5WDX+jeaY9SodKRzuvD6LxvXv8TXuhs0wHyVk=;
Message-ID: <87128.1778.qm@web111414.mail.gq1.yahoo.com>
X-YMail-OSG: .btV5NcVM1kZuoZbkmYQ6NNzJvLKMw6rz7NXEd0lxoUn3QGM6vAlNiSVXKWXdiH7zycbzMRD6xt6Hb_ibuFbom5xUQphIAUWOYNwfGDaIRVdvv27jTEm8i_Vo54eY_d6l_5J6Yft0Q.gew2e4DpL54L1zO6rVum2Gt.X7RfCxZ1xOX_SElwB5ueYLYdSoFT6vi_JLrJ8eneKHVgTSKs6RZoGkRrrb6Vx4dlbeC_UwIRTO7Sk
Received: from [206.16.17.212] by web111414.mail.gq1.yahoo.com via HTTP; Fri, 13 Mar 2009 16:22:06 PDT
X-Mailer: YahooMailRC/1277.32 YahooMailWebService/0.7.289.1
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
Date: Fri, 13 Mar 2009 16:22:06 -0700 (PDT)
From: Behcet Sarikaya <behcetsarikaya@yahoo.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
In-Reply-To: <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1099612495-1236986526=:1778"
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Behcet Sarikaya <sarikaya@ieee.org>
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2009 23:28:09 -0000

--0-1099612495-1236986526=:1778
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Hannes,=0A=A0 Fig. 1 in RFC 5296 is included to introduce full EAP authe=
ntication to the reader so that EAP Re-authentication Protocol can be prese=
nted.=0A=0A=A0 I agree with you that in Fig. 2 should have indicated ER Ser=
ver not just Server, but I think this has been clarified in the text.=0A=0A=
=A0 Shouldn't it be ER Server but not ERP Server? ER Server is defined in t=
he terminology section of RFC 5296.=0A=0ARegards,=0A=0ABehcet=0A=0A=0A=0A=
=0A________________________________=0AFrom: Hannes Tschofenig <Hannes.Tscho=
fenig@gmx.net>=0ATo: Qin Wu <sunseawq@huawei.com>; Julien Bournelle <julien=
.bournelle@gmail.com>=0ACc: dime@ietf.org; hokey@ietf.org=0ASent: Thursday,=
 March 12, 2009 5:39:51 AM=0ASubject: [Dime] DiME ERP - Getting the message=
 flows right=0A=0AThe figures in http://www.ietf.org/rfc/rfc5296.txt are pr=
etty confusing. =0A=0AFor example, Figure 2 talks about a 'server' rather t=
han saying that this is=0Athe ERP server. =0A=0AFigure 3 is even more confu=
sing as it shows a standard EAP exchange but then=0Ahas a ER server in ther=
e. =0A=0A=A0 Peer=A0 =A0 =A0 =A0 EAP Authenticator=A0 =A0 Local ER Server=
=A0 =A0 Home EAP Server=0A=A0 =3D=3D=3D=3D=A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=0A=0A=
=A0 <-- EAP-Request/ --=0A=A0 =A0 =A0 =A0 Identity=0A=0A=A0 -- EAP Response=
/-->=0A=A0 =A0 =A0 =A0 Identity=A0 =A0 =A0 --AAA(EAP Response/-->=0A=A0 =A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Identity)=A0 =A0 =A0 --AAA=
(EAP Response/ -->=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Identity,=0A=A0 =A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 [DSRK Request,=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 domain name])=0A=0A=A0 =
<------------------------ EAP Method exchange------------------>=0A=0A=A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 =A0 <---AAA(MSK, DSRK, ----=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 EMSKname,=0A=A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 EAP-Success)=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 <---=A0 AAA(MSK,=A0 -----=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 =A0 =A0 =A0 EAP-Success)=0A=0A=A0 <---EAP-Success-----=0A=0A=A0 =A0 =
=A0 =A0 =A0 =A0 Figure 3: Local ERP Exchange, Initial EAP Exchange =0A=0AI =
think that the figures have to look like: =0A=0A=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=0A=3D=3D=3D=3D=3D=3D=3D=
=0A=0A=A0 EAP Peer=A0 =A0 =A0 =A0 =A0 Diameter EAP Client=A0 =A0 =A0 =A0 =
=A0 =A0 =A0 EAP Server=0A=A0 =3D=3D=3D=3D=3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=0A=0A=A0 =A0 <--- EAP-Request/ -----=
-=0A=A0 =A0 =A0 =A0 =A0 =A0 Identity=0A=0A=A0 =A0 ----- EAP Response/ --->=
=0A=A0 =A0 =A0 =A0 =A0 =A0 Identity=A0 =A0 =A0 =A0 =A0 ---AAA(EAP Response/=
Identity)-->=0A=0A=A0 =A0 <--- EAP Method ------->=A0 <------ AAA(EAP Metho=
d -------->=0A=A0 =A0 =A0 =A0 =A0 exchange=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 exchange)=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 <----AAA(MSK, EAP-Success)------=0A=0A=A0 =A0 <---EAP-Success------=
---=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Figure 1: EAP Authenti=
cation=0A=0A[This figure does not have any ERP stuff in there. That does no=
t seem to be=0Aright or at least not relevant then.]=0A=0A=0A=A0 Peer=A0 =
=A0 =A0 =A0 =A0 =A0 =A0 Diameter ERP Client=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
ERP Server=0A=A0 =3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=
=3D=3D=3D=0A=0A=A0 =A0 [<-- EAP-Initiate/ -----=0A=A0 =A0 =A0 =A0 Re-auth-S=
tart]=0A=A0 =A0 [<-- EAP-Request/ ------=0A=A0 =A0 =A0 =A0 Identity]=0A=0A=
=0A=A0 =A0 ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->=0A=A0=
 =A0 =A0 =A0 =A0 Re-auth/=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Re-auth/=0A=A0=
 =A0 =A0 =A0 [Bootstrap]=A0 =A0 =A0 =A0 =A0 =A0 =A0 [Bootstrap])=0A=0A=A0 =
=A0 <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------=0A=A0 =A0 =
=A0 =A0 =A0 Re-auth/=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Re-auth/=0A=A0 =A0 =
=A0 =A0 [Bootstrap]=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 [Bootstrap])=0A=0A=A0 No=
te: [] brackets indicate optionality.=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 Figure 2: ERP Exchange=0A=0A=0A[New Diameter ERP applic=
ation in action.]=0A=0A=0APeer=A0 =A0 =A0 =A0 Diameter ERP/EAP=A0 =A0 =A0 L=
ocal EAP Proxy/=A0 =A0 Home EAP/ERP=0A=3D=3D=3D=3D=A0 =A0 =A0 =A0 =3D=3D=3D=
=3D=3DClient=3D=3D=3D=3D=3D=3D=A0 =A0 =3D=3D=3DERP server=3D=3D=A0 =A0 =3D=
=3D=3D=3DServer=3D=3D=3D=3D=3D=0A=0A<-- EAP-Request/ --=0A=A0 =A0 =A0 Ident=
ity=0A=0A-- EAP Response/-->=0A=A0 =A0 =A0 Identity=A0 =A0 =A0 --AAA(EAP Re=
sponse/-->=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Identity)=
=A0 =A0 =A0 --AAA(EAP Response/ -->=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Identit=
y,=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 [DSRK Request,=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 domain name])=0A=0A=
<------------------------ EAP Method exchange------------------>=0A=0A=A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 <---AAA(MSK, [DSRK, ----=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 EMSKname],=0A=A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 =A0 EAP-Success)=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 <---=A0 =
AAA(MSK,=A0 -----=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 EAP=
-Success)=0A=0A<---EAP-Success-----=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 Figure 3: =
Local ERP Exchange, Initial EAP Exchange=0A=0A=0A=0A=0A[Here we assume that=
 there is some communication going on between the=0ADiameter EAP proxy and =
the ERP server in the local network. =0AFor editorial reasons we do not sho=
w the two entities separately but maybe=0Awe should. The same is true for t=
he Diameter EAP server and the ERP server.=0A=0AGraphically, this could be =
shown as: =0A=0A=0A=0A=A0 Diameter EAP +-------------+=A0 Diameter EAP=A0 +=
-------------+=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 |=A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 |=0A<------------>=
| Local=A0 =A0 =A0 |<---------------->| Home=A0 =A0 =A0 =A0 |=0A=A0 =A0 =A0=
 =A0 =A0 =A0 =A0 | Diameter=A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 | D=
iameter=A0 =A0 |=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 | EAP Proxy=A0 |=A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 | EAP Server=A0 |=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 |=
=A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =
=A0 =A0 =A0 |=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 +-------------+=A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 +-------------+=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 ^=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 ^=
=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 (a)| proprietary=A0 =A0 =A0 =A0 prop=
rietary |(b)=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 v=A0 =A0 =A0 =A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 v=0A=A0 =A0 =A0 =A0 =A0 =
=A0 =A0 +-------------+=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 +-------------+=
=0A=A0 Diameter ERP |=A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 Diameter ERP=A0 |=A0 =
=A0 =A0 =A0 =A0 =A0 |=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 | Local=A0 =A0 =A0 |=A0=
 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 Home=A0 =A0 =A0 |=0A<------------>| D=
iameter=A0 =A0 |<---------------->|=A0 Diameter=A0 |=0A=A0 =A0 =A0 =A0 =A0 =
=A0 =A0 | ERP Server=A0 |=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 ERP Serve=
r |=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0=
 =A0 =A0 =A0 =A0 =A0 |=A0 =A0 =A0 =A0 =A0 =A0 |=0A=A0 =A0 =A0 =A0 =A0 =A0 =
=A0 +-------------+=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 +-------------+=0A=
=0AIt might be useful to say what information is exchanged at (a) and (b) a=
nd=0Awhen in the protocol exchange.=0A=0A]=0A=0A=A0 Peer=A0 =A0 =A0 =A0 =A0=
 =A0 =A0 =A0 ER Authenticator=A0 =A0 =A0 =A0 =A0 =A0 Local ER Server=0A=A0 =
=3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=A0 =A0 =A0 =A0 =A0 =A0 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=0A=0A=A0 [<-- EAP-Initiate/ --------=0A=A0 =A0 =A0 =A0 Re-auth=
-Start]=0A=A0 [<-- EAP-Request/ ---------=0A=A0 =A0 =A0 =A0 Identity]=0A=0A=
=A0 =A0 ---- EAP-Initiate/ -------> ----AAA(EAP-Initiate/ -------->=0A=A0 =
=A0 =A0 =A0 =A0 Re-auth=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Re-a=
uth)=0A=0A=A0 =A0 <--- EAP-Finish/ ---------- <---AAA(rMSK,EAP-Finish/-----=
--=0A=A0 =A0 =A0 =A0 =A0 Re-auth=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=
 =A0 Re-auth)=0A=0A=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Figure 4: Lo=
cal ERP Exchange=0A=0A[Is this figure from a Diameter ERP routing the same =
as Figure 2?]=0A=0A=0ASo, I suggest to get the high level messaing right be=
fore starting with the=0Adetails=0A=0ACiao=0AHannes=0A=0A__________________=
_____________________________=0ADiME mailing list=0ADiME@ietf.org=0Ahttps:/=
/www.ietf.org/mailman/listinfo/dime=0A=0A=0A=0A      
--0-1099612495-1236986526=:1778
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D"text/css"><!-- DIV {margin:0px;} --></style></he=
ad><body><div style=3D"font-family:times new roman, new york, times, serif;=
font-size:14pt"><DIV>Hi Hannes,</DIV>=0A<DIV>&nbsp; Fig. 1 in RFC 5296 is i=
ncluded to introduce full EAP authentication to the reader so that EAP Re-a=
uthentication Protocol can be presented.</DIV>=0A<DIV>&nbsp;</DIV>=0A<DIV>&=
nbsp; I agree with you that in Fig. 2 should have indicated ER Server not j=
ust Server, but I think this has been clarified in the text.</DIV>=0A<DIV>&=
nbsp;</DIV>=0A<DIV>&nbsp; Shouldn't it be ER Server but not ERP Server? ER =
Server is defined in the terminology section of RFC 5296.</DIV>=0A<DIV>&nbs=
p;</DIV>=0A<DIV>Regards,</DIV>=0A<DIV>&nbsp;</DIV>=0A<DIV>Behcet<BR></DIV>=
=0A<DIV style=3D"FONT-SIZE: 14pt; FONT-FAMILY: times new roman, new york, t=
imes, serif"><BR>=0A<DIV style=3D"FONT-SIZE: 13px; FONT-FAMILY: arial, helv=
etica, sans-serif"><FONT face=3DTahoma size=3D2>=0A<HR SIZE=3D1>=0A<B><SPAN=
 style=3D"FONT-WEIGHT: bold">From:</SPAN></B> Hannes Tschofenig &lt;Hannes.=
Tschofenig@gmx.net&gt;<BR><B><SPAN style=3D"FONT-WEIGHT: bold">To:</SPAN></=
B> Qin Wu &lt;sunseawq@huawei.com&gt;; Julien Bournelle &lt;julien.bournell=
e@gmail.com&gt;<BR><B><SPAN style=3D"FONT-WEIGHT: bold">Cc:</SPAN></B> dime=
@ietf.org; hokey@ietf.org<BR><B><SPAN style=3D"FONT-WEIGHT: bold">Sent:</SP=
AN></B> Thursday, March 12, 2009 5:39:51 AM<BR><B><SPAN style=3D"FONT-WEIGH=
T: bold">Subject:</SPAN></B> [Dime] DiME ERP - Getting the message flows ri=
ght<BR></FONT><BR>The figures in http://www.ietf.org/rfc/rfc5296.txt are pr=
etty confusing. <BR><BR>For example, Figure 2 talks about a 'server' rather=
 than saying that this is<BR>the ERP server. <BR><BR>Figure 3 is even more =
confusing as it shows a standard EAP exchange but then<BR>has a ER server i=
n there. <BR><BR>&nbsp; Peer&nbsp; &nbsp; &nbsp; &nbsp; EAP Authenticator&n=
bsp; &nbsp; Local ER Server&nbsp; &nbsp; Home EAP Server<BR>&nbsp;
 =3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D&nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D&nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR><BR>&nbsp=
; &lt;-- EAP-Request/ --<BR>&nbsp; &nbsp; &nbsp; &nbsp; Identity<BR><BR>&nb=
sp; -- EAP Response/--&gt;<BR>&nbsp; &nbsp; &nbsp; &nbsp; Identity&nbsp; &n=
bsp; &nbsp; --AAA(EAP Response/--&gt;<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Identity)&n=
bsp; &nbsp; &nbsp; --AAA(EAP Response/ --&gt;<BR>&nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; Identity,<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [DSRK Request,<BR>&nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp;
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; domain name])<BR><=
BR>&nbsp; &lt;------------------------ EAP Method exchange-----------------=
-&gt;<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &lt;---AAA(MSK, DSRK, ----<BR>&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EMS=
Kname,<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; EAP-Success)<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;---&nbsp; AAA(MSK,&nb=
sp; -----<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EAP-Success)<BR><BR>&nbsp;
 &lt;---EAP-Success-----<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; F=
igure 3: Local ERP Exchange, Initial EAP Exchange <BR><BR>I think that the =
figures have to look like: <BR><BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR>=3D=3D=3D=3D=3D=3D=3D<BR><BR>&nb=
sp; EAP Peer&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Diameter EAP Client&nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EAP Server<BR>&nbsp; =3D=3D=3D=3D=
=3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR><BR>&nbsp; &nbsp; &lt;--- EAP-Reques=
t/ ------<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Identity<BR><BR>&nbs=
p; &nbsp; ----- EAP Response/ ---&gt;<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; Identity&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ---AAA(EAP Response/Iden=
tity)--&gt;<BR><BR>&nbsp; &nbsp; &lt;--- EAP Method -------&gt;&nbsp; &lt;-=
----- AAA(EAP Method --------&gt;<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
 exchange&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; exchange)<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;----AAA(MSK, EAP-Suc=
cess)------<BR><BR>&nbsp; &nbsp; &lt;---EAP-Success---------<BR><BR>&nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figur=
e 1: EAP Authentication<BR><BR>[This figure does not have any ERP stuff in =
there. That does not seem to be<BR>right or at least not relevant then.]<BR=
><BR><BR>&nbsp; Peer&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Diamet=
er ERP Client&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ERP Se=
rver<BR>&nbsp; =3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3D=3D<BR><BR>&nbsp; =
&nbsp; [&lt;-- EAP-Initiate/ -----<BR>&nbsp; &nbsp; &nbsp; &nbsp; Re-auth-S=
tart]<BR>&nbsp; &nbsp; [&lt;--
 EAP-Request/ ------<BR>&nbsp; &nbsp; &nbsp; &nbsp; Identity]<BR><BR><BR>&n=
bsp; &nbsp; ---- EAP-Initiate/ ----&gt; ----AAA(EAP-Initiate/ ----------&gt=
;<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth/&nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth/<BR>&nbsp; &nbsp; &nbsp; &nbsp;=
 [Bootstrap]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [Bootstrap])<B=
R><BR>&nbsp; &nbsp; &lt;--- EAP-Finish/ ------&gt; &lt;---AAA(rMSK,EAP-Fini=
sh/---------<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth/&nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth/<BR>&nbsp; &nbsp; &n=
bsp; &nbsp; [Bootstrap]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; [Bootstrap])<BR><BR>&nbsp; Note: [] brackets indicate optionality.<BR><=
BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; Figure 2: ERP Exchange<BR><BR><BR>[New Diameter ERP appl=
ication in action.]<BR><BR><BR>Peer&nbsp; &nbsp; &nbsp; &nbsp;
 Diameter ERP/EAP&nbsp; &nbsp; &nbsp; Local EAP Proxy/&nbsp; &nbsp; Home EA=
P/ERP<BR>=3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3DClient=3D=
=3D=3D=3D=3D=3D&nbsp; &nbsp; =3D=3D=3DERP server=3D=3D&nbsp; &nbsp; =3D=3D=
=3D=3DServer=3D=3D=3D=3D=3D<BR><BR>&lt;-- EAP-Request/ --<BR>&nbsp; &nbsp; =
&nbsp; Identity<BR><BR>-- EAP Response/--&gt;<BR>&nbsp; &nbsp; &nbsp; Ident=
ity&nbsp; &nbsp; &nbsp; --AAA(EAP Response/--&gt;<BR>&nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Identi=
ty)&nbsp; &nbsp; &nbsp; --AAA(EAP Response/ --&gt;<BR>&nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; &nbsp; Identity,<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [DSRK Request,<BR>&nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; domain name])<BR><BR>&lt;------------------------ EAP Method exchange---=
---------------&gt;<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &lt;---AAA(MSK, [DSRK, ----<BR>&nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EM=
SKname],<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; EAP-Success)<BR><BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;---&nbsp; AAA(MSK,&nbsp; -----<BR=
>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp;
 EAP-Success)<BR><BR>&lt;---EAP-Success-----<BR><BR>&nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; Figure 3: Local ERP Exchange, Initial EAP Exchange<BR><B=
R><BR><BR><BR>[Here we assume that there is some communication going on bet=
ween the<BR>Diameter EAP proxy and the ERP server in the local network. <BR=
>For editorial reasons we do not show the two entities separately but maybe=
<BR>we should. The same is true for the Diameter EAP server and the ERP ser=
ver.<BR><BR>Graphically, this could be shown as: <BR><BR><BR><BR>&nbsp; Dia=
meter EAP +-------------+&nbsp; Diameter EAP&nbsp; +-------------+<BR>&nbsp=
; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |<BR>&lt;------------&gt;| Loca=
l&nbsp; &nbsp; &nbsp; |&lt;----------------&gt;| Home&nbsp; &nbsp; &nbsp; &=
nbsp; |<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |
 Diameter&nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; | Diameter&nbsp; &nbsp; |<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; | EAP Proxy&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; | EAP Server&nbsp; |<BR>&nbsp; &nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp; |<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +=
-------------+&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; +-------------+<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; &nbsp; &nbsp; ^&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^<BR>&nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; (a)| proprietary&nbsp=
; &nbsp; &nbsp; &nbsp; proprietary |(b)<BR>&nbsp; &nbsp; &nbsp;
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; v&nbsp; &nbsp; &nb=
sp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &=
nbsp; &nbsp; &nbsp; v<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +=
-------------+&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; +-------------+<BR>&nbsp; Diameter ERP |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; |&nbsp; &nbsp; Diameter ERP&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; &nbsp; |<BR>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | Local&nb=
sp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; |&nbsp; Home&nbsp; &nbsp; &nbsp; |<BR>&lt;------------&gt;| Diameter=
&nbsp; &nbsp; |&lt;----------------&gt;|&nbsp; Diameter&nbsp; |<BR>&nbsp; &=
nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | ERP Server&nbsp; |&nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; ERP Server |<BR>&n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp;
 &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nb=
sp; &nbsp; |&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |<BR>&nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; +-------------+&nbsp; &nbsp; &nbsp; &nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; +-------------+<BR><BR>It might be usef=
ul to say what information is exchanged at (a) and (b) and<BR>when in the p=
rotocol exchange.<BR><BR>]<BR><BR>&nbsp; Peer&nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; ER Authenticator&nbsp; &nbsp; &nbsp; &nbsp; &nbsp=
; &nbsp; Local ER Server<BR>&nbsp; =3D=3D=3D=3D&nbsp; &nbsp; &nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D<BR><BR>&nbsp; [&lt;-- EAP-Initiate/ --------<BR>&nbsp; &nbs=
p; &nbsp; &nbsp; Re-auth-Start]<BR>&nbsp; [&lt;-- EAP-Request/ ---------<BR=
>&nbsp; &nbsp; &nbsp; &nbsp; Identity]<BR><BR>&nbsp; &nbsp; ---- EAP-Initia=
te/ -------&gt; ----AAA(EAP-Initiate/ --------&gt;<BR>&nbsp;
 &nbsp; &nbsp; &nbsp; &nbsp; Re-auth&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth)<BR><BR>&nbsp; &nbsp; =
&lt;--- EAP-Finish/ ---------- &lt;---AAA(rMSK,EAP-Finish/-------<BR>&nbsp;=
 &nbsp; &nbsp; &nbsp; &nbsp; Re-auth&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbs=
p; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Re-auth)<BR><BR>&nbsp; &nbsp; =
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Figure 4: Lo=
cal ERP Exchange<BR><BR>[Is this figure from a Diameter ERP routing the sam=
e as Figure 2?]<BR><BR><BR>So, I suggest to get the high level messaing rig=
ht before starting with the<BR>details<BR><BR>Ciao<BR>Hannes<BR><BR>_______=
________________________________________<BR>DiME mailing list<BR><A href=3D=
"mailto:DiME@ietf.org" ymailto=3D"mailto:DiME@ietf.org">DiME@ietf.org</A><B=
R><A href=3D"https://www.ietf.org/mailman/listinfo/dime" target=3D_blank>ht=
tps://www.ietf.org/mailman/listinfo/dime</A><BR></DIV></DIV></div><br>=0A=
=0A      </body></html>
--0-1099612495-1236986526=:1778--

From Hannes.Tschofenig@gmx.net  Sat Mar 14 02:05:12 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC2B23A67F9 for <dime@core3.amsl.com>; Sat, 14 Mar 2009 02:05:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.065
X-Spam-Level: 
X-Spam-Status: No, score=-2.065 tagged_above=-999 required=5 tests=[AWL=-0.066, BAYES_00=-2.599, J_CHICKENPOX_33=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IbFBlmxO6iID for <dime@core3.amsl.com>; Sat, 14 Mar 2009 02:05:12 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 3D2A93A67CF for <dime@ietf.org>; Sat, 14 Mar 2009 02:05:11 -0700 (PDT)
Received: (qmail invoked by alias); 14 Mar 2009 08:59:09 -0000
Received: from a91-154-108-144.elisa-laajakaista.fi (EHLO 4FIL42860) [91.154.108.144] by mail.gmx.net (mp052) with SMTP; 14 Mar 2009 09:59:09 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18SWfB2IPUSic6mASTm63PQZVUu24QnHDtklNWnMG 13ziHhlcVCgPsL
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: "'Behcet Sarikaya'" <sarikaya@ieee.org>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net> <87128.1778.qm@web111414.mail.gq1.yahoo.com>
Date: Sat, 14 Mar 2009 11:00:16 +0200
Message-ID: <03b001c9a483$4c077d00$0201a8c0@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <87128.1778.qm@web111414.mail.gq1.yahoo.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-Index: AcmkMoctGoOZkncLTHSH7GhONMR+VAAUG7qw
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.65
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Mar 2009 09:05:12 -0000

Hi Behcet, 
 

	Hi Hannes,
	  Fig. 1 in RFC 5296 is included to introduce full EAP
authentication to the reader so that EAP Re-authentication Protocol can be
presented.
	 
[hannes] OK. Makes sense in RFC 5296 but not in the Diameter document, I
believe. 
	 
	 
	  I agree with you that in Fig. 2 should have indicated ER Server
not just Server, but I think this has been clarified in the text.
	 
[hannes] Maybe it is but still there is still a lot of confusion on how the
message routing works and these details make it even more difficult to
understand. 
	 
	  Shouldn't it be ER Server but not ERP Server? ER Server is defined
in the terminology section of RFC 5296. 

[hannes]	Correct. 
	 
Ciao
Hannes
	 
	 
	Regards,
	 
	Behcet
	

	________________________________

	From: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
	To: Qin Wu <sunseawq@huawei.com>; Julien Bournelle
<julien.bournelle@gmail.com>
	Cc: dime@ietf.org; hokey@ietf.org
	Sent: Thursday, March 12, 2009 5:39:51 AM
	Subject: [Dime] DiME ERP - Getting the message flows right
	
	The figures in http://www.ietf.org/rfc/rfc5296.txt are pretty
confusing. 
	
	For example, Figure 2 talks about a 'server' rather than saying that
this is
	the ERP server. 
	
	Figure 3 is even more confusing as it shows a standard EAP exchange
but then
	has a ER server in there. 
	
	  Peer        EAP Authenticator    Local ER Server    Home EAP
Server
	  ====        =================    ===============
===============
	
	  <-- EAP-Request/ --
	        Identity
	
	  -- EAP Response/-->
	        Identity      --AAA(EAP Response/-->
	                            Identity)      --AAA(EAP Response/ -->
	                                                      Identity,
	                                                [DSRK Request,
	                                              domain name])
	
	  <------------------------ EAP Method exchange------------------>
	
	                                            <---AAA(MSK, DSRK, ----
	                                                  EMSKname,
	                                                EAP-Success)
	
	                      <---  AAA(MSK,  -----
	                            EAP-Success)
	
	  <---EAP-Success-----
	
	            Figure 3: Local ERP Exchange, Initial EAP Exchange 
	
	I think that the figures have to look like: 
	
	
============================================================================
	=======
	
	  EAP Peer          Diameter EAP Client              EAP Server
	  ========          =================                ==========
	
	    <--- EAP-Request/ ------
	            Identity
	
	    ----- EAP Response/ --->
	            Identity          ---AAA(EAP Response/Identity)-->
	
	    <--- EAP Method ------->  <------ AAA(EAP Method -------->
	          exchange                    exchange)
	
	                              <----AAA(MSK, EAP-Success)------
	
	    <---EAP-Success---------
	
	                      Figure 1: EAP Authentication
	
	[This figure does not have any ERP stuff in there. That does not
seem to be
	right or at least not relevant then.]
	
	
	  Peer              Diameter ERP Client                ERP Server
	  ====              =============                      ======
	
	    [<-- EAP-Initiate/ -----
	        Re-auth-Start]
	    [<-- EAP-Request/ ------
	        Identity]
	
	
	    ---- EAP-Initiate/ ----> ----AAA(EAP-Initiate/ ---------->
	          Re-auth/                  Re-auth/
	        [Bootstrap]              [Bootstrap])
	
	    <--- EAP-Finish/ ------> <---AAA(rMSK,EAP-Finish/---------
	          Re-auth/                  Re-auth/
	        [Bootstrap]                [Bootstrap])
	
	  Note: [] brackets indicate optionality.
	
	                          Figure 2: ERP Exchange
	
	
	[New Diameter ERP application in action.]
	
	
	Peer        Diameter ERP/EAP      Local EAP Proxy/    Home EAP/ERP
	====        =====Client======    ===ERP server==    ====Server=====
	
	<-- EAP-Request/ --
	      Identity
	
	-- EAP Response/-->
	      Identity      --AAA(EAP Response/-->
	                          Identity)      --AAA(EAP Response/ -->
	                                                    Identity,
	                                              [DSRK Request,
	                                            domain name])
	
	<------------------------ EAP Method exchange------------------>
	
	                                          <---AAA(MSK, [DSRK, ----
	                                                EMSKname],
	                                              EAP-Success)
	
	                    <---  AAA(MSK,  -----
	                          EAP-Success)
	
	<---EAP-Success-----
	
	            Figure 3: Local ERP Exchange, Initial EAP Exchange
	
	
	
	
	[Here we assume that there is some communication going on between
the
	Diameter EAP proxy and the ERP server in the local network. 
	For editorial reasons we do not show the two entities separately but
maybe
	we should. The same is true for the Diameter EAP server and the ERP
server.
	
	Graphically, this could be shown as: 
	
	
	
	  Diameter EAP +-------------+  Diameter EAP  +-------------+
	              |            |                  |            |
	<------------>| Local      |<---------------->| Home        |
	              | Diameter    |                  | Diameter    |
	              | EAP Proxy  |                  | EAP Server  |
	              |            |                  |            |
	              +-------------+                  +-------------+
	                      ^                                ^
	                  (a)| proprietary        proprietary |(b)
	                      v                                v
	              +-------------+                  +-------------+
	  Diameter ERP |            |    Diameter ERP  |            |
	              | Local      |                  |  Home      |
	<------------>| Diameter    |<---------------->|  Diameter  |
	              | ERP Server  |                  |  ERP Server |
	              |            |                  |            |
	              +-------------+                  +-------------+
	
	It might be useful to say what information is exchanged at (a) and
(b) and
	when in the protocol exchange.
	
	]
	
	  Peer                ER Authenticator            Local ER Server
	  ====                ================            ===============
	
	  [<-- EAP-Initiate/ --------
	        Re-auth-Start]
	  [<-- EAP-Request/ ---------
	        Identity]
	
	    ---- EAP-Initiate/ -------> ----AAA(EAP-Initiate/ -------->
	          Re-auth                        Re-auth)
	
	    <--- EAP-Finish/ ---------- <---AAA(rMSK,EAP-Finish/-------
	          Re-auth                        Re-auth)
	
	                      Figure 4: Local ERP Exchange
	
	[Is this figure from a Diameter ERP routing the same as Figure 2?]
	
	
	So, I suggest to get the high level messaing right before starting
with the
	details
	
	Ciao
	Hannes
	
	_______________________________________________
	DiME mailing list
	DiME@ietf.org
	https://www.ietf.org/mailman/listinfo/dime
	




From dromasca@avaya.com  Mon Mar 16 09:46:31 2009
Return-Path: <dromasca@avaya.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5749428C1B4 for <dime@core3.amsl.com>; Mon, 16 Mar 2009 09:46:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.527
X-Spam-Level: 
X-Spam-Status: No, score=-2.527 tagged_above=-999 required=5 tests=[AWL=0.072,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jkz2iDwMJfYf for <dime@core3.amsl.com>; Mon, 16 Mar 2009 09:46:30 -0700 (PDT)
Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) by core3.amsl.com (Postfix) with ESMTP id 1523528C1B2 for <dime@ietf.org>; Mon, 16 Mar 2009 09:46:29 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.38,373,1233550800"; d="scan'208";a="140381083"
Received: from unknown (HELO co300216-co-erhwest.avaya.com) ([198.152.7.5]) by de307622-de-outbound.net.avaya.com with ESMTP; 16 Mar 2009 12:47:10 -0400
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.12]) by co300216-co-erhwest-out.avaya.com with ESMTP; 16 Mar 2009 12:47:09 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 16 Mar 2009 17:46:57 +0100
Message-ID: <EDC652A26FB23C4EB6384A4584434A04014D508D@307622ANEX5.global.avaya.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Document Action: 'Diameter Command Code Registration for Third Generation Partnership Project (3GPP) Evolved Packet System (EPS)' to Informational RFC 
Thread-Index: AcmmVQ9GGPwqHWydSEqsrLwdATZRSQAAcACQ
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: <dime@ietf.org>
Subject: [Dime] FW: Document Action: 'Diameter Command Code Registration for Third Generation Partnership Project (3GPP) Evolved Packet System (EPS)' to Informational RFC
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Mar 2009 16:46:31 -0000

=20

-----Original Message-----
From: ietf-announce-bounces@ietf.org
[mailto:ietf-announce-bounces@ietf.org] On Behalf Of The IESG
Sent: Monday, March 16, 2009 6:33 PM
To: IETF-Announce
Cc: Internet Architecture Board; RFC Editor
Subject: Document Action: 'Diameter Command Code Registration for Third
Generation Partnership Project (3GPP) Evolved Packet System (EPS)' to
Informational RFC=20

The IESG has approved the following document:

- 'Diameter Command Code Registration for Third Generation Partnership=20
   Project (3GPP) Evolved Packet System (EPS) '
   <draft-jones-dime-3gpp-eps-command-codes-02.txt> as an Informational
RFC

This document has been reviewed in the IETF but is not the product of an
IETF Working Group.=20

The IESG contact person is Dan Romascanu.

A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-jones-dime-3gpp-eps-command-co
des-02.txt

Technical Summary

   This document registers a set of IANA Diameter Command Codes to be
   used in new vendor-specific Diameter applications defined for the
   Third Generation Partnership Project (3GPP) Evolved Packet System
   (EPS).  These new Diameter applications are defined for MME and SGSN
   related interfaces in the Release 8 architecture.

Working Group Summary

 This document is not a DIME working group document but has received
review from DIME WG members

Document Quality

The document has been reviewed by Hannes Tschofenig, Victor Fajardo and
Glen Zorn from the DIME working group. The main work this document is
based on has been developed in the 3GPP and has received a fair amount
of review.

Personnel

Hannes Tschofenig is the document shepherd. Dan Romascanu is the
responsible Area Director.

_______________________________________________
IETF-Announce mailing list
IETF-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/ietf-announce

From sdecugis@nict.go.jp  Mon Mar 16 23:08:58 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2874E3A6452; Mon, 16 Mar 2009 23:08:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.654
X-Spam-Level: 
X-Spam-Status: No, score=0.654 tagged_above=-999 required=5 tests=[AWL=-0.745,  BAYES_05=-1.11, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S6HhPun5gAv3; Mon, 16 Mar 2009 23:08:57 -0700 (PDT)
Received: from ns2.nict.go.jp (ns2.nict.go.jp [133.243.3.2]) by core3.amsl.com (Postfix) with ESMTP id 200883A6827; Mon, 16 Mar 2009 23:08:57 -0700 (PDT)
Received: from gw2.nict.go.jp (gw2 [133.243.18.251]) by ns2.nict.go.jp  with ESMTP id n2H65Y0m022056; Tue, 17 Mar 2009 15:05:34 +0900 (JST)
Received: from gw2.nict.go.jp (localhost [127.0.0.1]) by gw2.nict.go.jp  with ESMTP id n2H65Ya0005285; Tue, 17 Mar 2009 15:05:34 +0900 (JST)
Received: from mail2.nict.go.jp (mail.nict.go.jp [133.243.18.3]) by gw2.nict.go.jp  with ESMTP id n2H65YkF005282; Tue, 17 Mar 2009 15:05:34 +0900 (JST)
Received: from mail2.nict.go.jp (localhost [127.0.0.1]) by localhost.nict.go.jp (Postfix) with ESMTP id 326C26E88; Tue, 17 Mar 2009 15:05:34 +0900 (JST)
Received: from [133.243.146.166] (5gou2f-dhcp06.nict.go.jp [133.243.146.166]) by mail2.nict.go.jp (Postfix) with ESMTP id 10CF96E49; Tue, 17 Mar 2009 15:05:34 +0900 (JST)
Message-ID: <49BF3D9D.1040101@nict.go.jp>
Date: Tue, 17 Mar 2009 15:05:17 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Qin Wu <sunseawq@huawei.com>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com> <49B8F6AC.7010905@nict.go.jp> <04b501c9a3a9$2f99f830$1b0ca40a@china.huawei.com>
In-Reply-To: <04b501c9a3a9$2f99f830$1b0ca40a@china.huawei.com>
X-Enigmail-Version: 0.95.7
OpenPGP: id=33D9F61D
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not	?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 06:08:58 -0000

Hi,

Thank you for yor answer, and sorry for replying so late myself.

Qin Wu a écrit :
> Hi,Sebastien:
> The MSK and EMSK both result from EAP authentiction and are used to derive other keys.
> Also both MSK and EMSK are shared between the peer and the AAA server. So MSK has the same lifetime as EMSK, what's more, the derived keys also has the same lifetime as MSK or EMSK.
>
> As regarding the second question, since the keying materials is established through the EAP exchange between the peer and the server and shared between the corresponding two entities. I am sure the peer and the AAA server should agree on the lifetime of these keys firstly. With respect to how much is the lifetime of keys, it mostly depends on the specific implementation.
>   

Since ERP would use material derived from the EMSK, I guess that when
the MSK is expiring then an ERP exchange cannot occur, and therefore we
don't really have a choice here, but to use full EAP.

This brings the following conclusion (please correct me if I am wrong):
ERP is only used when the peer attaches to a new authenticator while
having a valid authentication material (EMSK).

I am not sure anyway how this is related to the {EAP or new} application
ID problem.

Best regards,
Sebastien.

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)


From sdecugis@nict.go.jp  Mon Mar 16 23:31:41 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F3653A6939; Mon, 16 Mar 2009 23:31:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.158
X-Spam-Level: 
X-Spam-Status: No, score=0.158 tagged_above=-999 required=5 tests=[AWL=0.248,  BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xpVrwk9SYF0T; Mon, 16 Mar 2009 23:31:40 -0700 (PDT)
Received: from ns2.nict.go.jp (ns2.nict.go.jp [133.243.3.2]) by core3.amsl.com (Postfix) with ESMTP id 595E73A6827; Mon, 16 Mar 2009 23:31:40 -0700 (PDT)
Received: from gw2.nict.go.jp (gw2 [133.243.18.251]) by ns2.nict.go.jp  with ESMTP id n2H6SNIf026440; Tue, 17 Mar 2009 15:28:23 +0900 (JST)
Received: from gw2.nict.go.jp (localhost [127.0.0.1]) by gw2.nict.go.jp  with ESMTP id n2H6SNp0013016; Tue, 17 Mar 2009 15:28:23 +0900 (JST)
Received: from mail1.nict.go.jp (mail.nict.go.jp [133.243.18.3]) by gw2.nict.go.jp  with ESMTP id n2H6SNqQ013013; Tue, 17 Mar 2009 15:28:23 +0900 (JST)
Received: from mail1.nict.go.jp (localhost [127.0.0.1]) by localhost.nict.go.jp (Postfix) with ESMTP id D2B46423B; Tue, 17 Mar 2009 15:28:22 +0900 (JST)
Received: from [133.243.146.166] (5gou2f-dhcp06.nict.go.jp [133.243.146.166]) by mail1.nict.go.jp (Postfix) with ESMTP id 8B6724216; Tue, 17 Mar 2009 15:28:22 +0900 (JST)
Message-ID: <49BF42F5.9030006@nict.go.jp>
Date: Tue, 17 Mar 2009 15:28:05 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>	<04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com> <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
In-Reply-To: <097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net>
X-Enigmail-Version: 0.95.7
OpenPGP: id=33D9F61D
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 06:31:41 -0000

Hi again,

After trying to capture the new mechanism (based on a new application
id) in a document, I have encountered an issue and I am not sure what is
the proper way to solve it.

When the local ER server (aka HOKEY server in the visited domain) needs
to retrieve the rDSRK material (i.e. it was not bootstrapped already)
this material can not be provided directly by the Home ER server,
because of the key hierarchy:

EMSK (in Home EAP server)
|
+- rRK (in Home ERP server)
|
+- DSRK (in Home EAP server or a local server)
    |
   +- rDSRK (in local ERP server)

There are two ways to get this material:
- through the home ERP server (in this case the home ER server receives
visited domain specific keying material, which may not be good)
- directly with an exchange between local ERP server and home EAP server.

This second option would be shown as follow ( exchange (c) ):

>   Diameter EAP +-------------+   Diameter EAP   +-------------+
>                |             |                  |             |
>  <------------>| Local       |<---------------->| Home        |
>                | Diameter    |                  | Diameter    |
>                | EAP Proxy   |                  | EAP Server  |
>                |             |            ----->|             |
>                +-------------+           /      +-------------+
>                       ^                 /              ^
>                    (a)| proprietary   (c)  proprietary |(b)
>                       v               /                v
>                +-------------+ <-----/          +-------------+
>   Diameter ERP |             |                  |             |
>                | Local       |    Diameter ERP  |  Home       |
>  <------------>| Diameter    |<---------------->|  Diameter   |
>                | ERP Server  |                  |  ERP Server |
>                |             |                  |             |
>                +-------------+                  +-------------+
>   

Note that the exchange (b) is needed anyway for the case when the peer
is in its home domain.


Does anybody have some comments on this?

Thank you,
Sebastien.


-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)


From hannes.tschofenig@nsn.com  Tue Mar 17 00:09:06 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B3E973A6838 for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:09:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.59
X-Spam-Level: 
X-Spam-Status: No, score=-5.59 tagged_above=-999 required=5 tests=[AWL=1.009,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCMm7705HOKD for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:09:06 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id B12DF3A67DD for <dime@ietf.org>; Tue, 17 Mar 2009 00:09:05 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n2H79lKk015330 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Tue, 17 Mar 2009 08:09:47 +0100
Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n2H79lbL015818 for <dime@ietf.org>; Tue, 17 Mar 2009 08:09:47 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 17 Mar 2009 08:09:46 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 17 Mar 2009 09:10:56 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45012890EA@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: draft-ietf-dime-erp
Thread-Index: Acmmz4RI20sM+ExQRPGYzHqP2c6nMQ==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 17 Mar 2009 07:09:47.0200 (UTC) FILETIME=[5B00F400:01C9A6CF]
Subject: [Dime] draft-ietf-dime-erp
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 07:09:06 -0000

Hi Lakshminath, Hi Julien, Hi Lionel, Hi Sebastien,=20

Just a reminder to post a snapshot of draft-ietf-dime-erp-01 during this
week to give folks an idea where we are heading with the document.=20

This is important to ensure that we are to make a decision about the
technical direction at the meeting*.=20

Ciao
Hannes

*: to then be confirmed on the mailing list.


From hannes.tschofenig@nsn.com  Tue Mar 17 00:16:02 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DE8613A6838 for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:16:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.62
X-Spam-Level: 
X-Spam-Status: No, score=-3.62 tagged_above=-999 required=5 tests=[AWL=-1.021,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m-sbx-ZIYCGY for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:16:02 -0700 (PDT)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id D8E1F3A6803 for <dime@ietf.org>; Tue, 17 Mar 2009 00:16:01 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n2H7Ggcu027678 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Tue, 17 Mar 2009 08:16:42 +0100
Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n2H7GgOV013736 for <dime@ietf.org>; Tue, 17 Mar 2009 08:16:42 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 17 Mar 2009 08:16:42 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 17 Mar 2009 09:17:51 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45012890F7@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: IETF#74: draft-ietf-dime-qos-parameters
Thread-Index: Acmm0Hv1cFgchbIcR0KUpmK5d5fe0g==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 17 Mar 2009 07:16:42.0617 (UTC) FILETIME=[529C8E90:01C9A6D0]
Subject: [Dime] IETF#74: draft-ietf-dime-qos-parameters
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 07:16:03 -0000

We have the following item on our agenda for IETF#74: =20

"
Diameter QoS parameters (Hannes)
http://tools.ietf.org/wg/dime/draft-ietf-dime-qos-parameters/
         =20
Note: Will only be discussed if there are open issues.
      Depends a bit on how much feedback we get regarding the
      priority AVPs.
"

There was a fair amount of feedback on the list and we were able to spin
the document with the document.=20
I don't think that there is anything more to say about it.=20


From hannes.tschofenig@nsn.com  Tue Mar 17 00:16:25 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EE7EF3A6803 for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:16:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.59
X-Spam-Level: 
X-Spam-Status: No, score=-5.59 tagged_above=-999 required=5 tests=[AWL=1.009,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Pgcjv9ft4C0 for <dime@core3.amsl.com>; Tue, 17 Mar 2009 00:16:25 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id 0008A3A68BD for <dime@ietf.org>; Tue, 17 Mar 2009 00:16:24 -0700 (PDT)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n2H7H3qT030693 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 17 Mar 2009 08:17:03 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n2H7Gwvl024778; Tue, 17 Mar 2009 08:17:00 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 17 Mar 2009 08:16:52 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 17 Mar 2009 09:18:01 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45012890FA@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: IETF#74: draft-ietf-dime-diameter-api  
Thread-Index: Acmm0IHhmoAud4iCSnGEYhCORK/Ytw==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <vfajardo@tari.toshiba.com>, <dave@frascone.com>
X-OriginalArrivalTime: 17 Mar 2009 07:16:52.0475 (UTC) FILETIME=[587CC4B0:01C9A6D0]
Cc: dime@ietf.org
Subject: [Dime] IETF#74: draft-ietf-dime-diameter-api
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 07:16:26 -0000

Looking through the meeting agenda I was hoping to see a draft update
for the deadline. I don't think I have seen one.=20
So, where are we with this document and do we need to discuss it during
the meeting?=20

Ciao
Hannes

From sdecugis@nict.go.jp  Tue Mar 17 00:48:45 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 617653A6A82; Tue, 17 Mar 2009 00:48:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.096
X-Spam-Level: 
X-Spam-Status: No, score=0.096 tagged_above=-999 required=5 tests=[AWL=0.186,  BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qBJN35Nqt8hn; Tue, 17 Mar 2009 00:48:44 -0700 (PDT)
Received: from ns1.nict.go.jp (ns1.nict.go.jp [133.243.3.1]) by core3.amsl.com (Postfix) with ESMTP id 4A3143A6946; Tue, 17 Mar 2009 00:48:44 -0700 (PDT)
Received: from gw1.nict.go.jp (gw1 [133.243.18.250]) by ns1.nict.go.jp  with ESMTP id n2H7jbKB014092; Tue, 17 Mar 2009 16:45:37 +0900 (JST)
Received: from gw1.nict.go.jp (localhost [127.0.0.1]) by gw1.nict.go.jp  with ESMTP id n2H7jbXP019453; Tue, 17 Mar 2009 16:45:37 +0900 (JST)
Received: from mail1.nict.go.jp (mail.nict.go.jp [133.243.18.3]) by gw1.nict.go.jp  with ESMTP id n2H7jaAU019450; Tue, 17 Mar 2009 16:45:36 +0900 (JST)
Received: from mail1.nict.go.jp (localhost [127.0.0.1]) by localhost.nict.go.jp (Postfix) with ESMTP id 9F720423B; Tue, 17 Mar 2009 16:45:36 +0900 (JST)
Received: from [133.243.146.166] (5gou2f-dhcp06.nict.go.jp [133.243.146.166]) by mail1.nict.go.jp (Postfix) with ESMTP id 80D464216; Tue, 17 Mar 2009 16:45:36 +0900 (JST)
Message-ID: <49BF550E.5070602@nict.go.jp>
Date: Tue, 17 Mar 2009 16:45:18 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>	<04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com>	<097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net> <49BF42F5.9030006@nict.go.jp>
In-Reply-To: <49BF42F5.9030006@nict.go.jp>
X-Enigmail-Version: 0.95.7
OpenPGP: id=33D9F61D
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 07:48:45 -0000

(Sorry for replying on myself)

I think a lot of confusion comes actually from the name "Home AAA
server" in RFC5296, section 5.1 (ERP bootstrapping). Does this refer to
EAP or ERP server? Or does this assume these server are the same logical
entity?

Thank you,
Sebastien.

Sebastien Decugis a écrit :
> Hi again,
>
> After trying to capture the new mechanism (based on a new application
> id) in a document, I have encountered an issue and I am not sure what is
> the proper way to solve it.
>
> When the local ER server (aka HOKEY server in the visited domain) needs
> to retrieve the rDSRK material (i.e. it was not bootstrapped already)
> this material can not be provided directly by the Home ER server,
> because of the key hierarchy:
>
> EMSK (in Home EAP server)
> |
> +- rRK (in Home ERP server)
> |
> +- DSRK (in Home EAP server or a local server)
>     |
>    +- rDSRK (in local ERP server)
>
> There are two ways to get this material:
> - through the home ERP server (in this case the home ER server receives
> visited domain specific keying material, which may not be good)
> - directly with an exchange between local ERP server and home EAP server.
>
> This second option would be shown as follow ( exchange (c) ):
>
>   
>>   Diameter EAP +-------------+   Diameter EAP   +-------------+
>>                |             |                  |             |
>>  <------------>| Local       |<---------------->| Home        |
>>                | Diameter    |                  | Diameter    |
>>                | EAP Proxy   |                  | EAP Server  |
>>                |             |            ----->|             |
>>                +-------------+           /      +-------------+
>>                       ^                 /              ^
>>                    (a)| proprietary   (c)  proprietary |(b)
>>                       v               /                v
>>                +-------------+ <-----/          +-------------+
>>   Diameter ERP |             |                  |             |
>>                | Local       |    Diameter ERP  |  Home       |
>>  <------------>| Diameter    |<---------------->|  Diameter   |
>>                | ERP Server  |                  |  ERP Server |
>>                |             |                  |             |
>>                +-------------+                  +-------------+
>>   
>>     
>
> Note that the exchange (b) is needed anyway for the case when the peer
> is in its home domain.
>
>
> Does anybody have some comments on this?
>
> Thank you,
> Sebastien.
>
>
>   

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)


From hannes.tschofenig@nsn.com  Tue Mar 17 01:35:35 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A263D3A6A82; Tue, 17 Mar 2009 01:35:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.618
X-Spam-Level: 
X-Spam-Status: No, score=-3.618 tagged_above=-999 required=5 tests=[AWL=-1.019, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jrEs-s5qQs9H; Tue, 17 Mar 2009 01:35:34 -0700 (PDT)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id 4EE173A69DC; Tue, 17 Mar 2009 01:35:33 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n2H8aD0J017771 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 17 Mar 2009 09:36:13 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n2H8aBLe025765; Tue, 17 Mar 2009 09:36:12 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 17 Mar 2009 09:36:12 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 17 Mar 2009 10:37:21 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B45012891F1@FIESEXC015.nsn-intra.net>
In-Reply-To: <49BF42F5.9030006@nict.go.jp>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] DiME ERP - Getting the message flows right
Thread-Index: AcmmyiSTJdwXMOiwQ1aeE8jqAAijbwAEVRcg
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com>	<020e01c99ca1$3b704150$2fb4b70a@nsnintra.net>	<5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com>	<021601c99f18$ee622250$0201a8c0@nsnintra.net>	<5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com>	<006b01c9a19e$aa68cf30$ff3a6d90$@net>	<07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net>	<024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com>	<5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com>	<04e101c9a2f8$8a871ef0$1b0ca40a@china.huawei.com><097701c9a2fe$e070c6d0$0201a8c0@nsnintra.net> <49BF42F5.9030006@nict.go.jp>
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "ext Sebastien Decugis" <sdecugis@nict.go.jp>, "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
X-OriginalArrivalTime: 17 Mar 2009 08:36:12.0291 (UTC) FILETIME=[6D8F0D30:01C9A6DB]
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] DiME ERP - Getting the message flows right
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Mar 2009 08:35:35 -0000

Hmmm. Interesting.=20

>From your description I would go for a direct exchange between local ERP
server and home EAP server.=20


>-----Original Message-----
>From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On=20
>Behalf Of ext Sebastien Decugis
>Sent: 17 March, 2009 08:28
>To: Hannes Tschofenig
>Cc: dime@ietf.org; hokey@ietf.org
>Subject: Re: [Dime] DiME ERP - Getting the message flows right
>
>Hi again,
>
>After trying to capture the new mechanism (based on a new application
>id) in a document, I have encountered an issue and I am not=20
>sure what is the proper way to solve it.
>
>When the local ER server (aka HOKEY server in the visited=20
>domain) needs to retrieve the rDSRK material (i.e. it was not=20
>bootstrapped already) this material can not be provided=20
>directly by the Home ER server, because of the key hierarchy:
>
>EMSK (in Home EAP server)
>|
>+- rRK (in Home ERP server)
>|
>+- DSRK (in Home EAP server or a local server)
>    |
>   +- rDSRK (in local ERP server)
>
>There are two ways to get this material:
>- through the home ERP server (in this case the home ER server=20
>receives visited domain specific keying material, which may=20
>not be good)
>- directly with an exchange between local ERP server and home=20
>EAP server.
>
>This second option would be shown as follow ( exchange (c) ):
>
>>   Diameter EAP +-------------+   Diameter EAP   +-------------+
>>                |             |                  |             |
>>  <------------>| Local       |<---------------->| Home        |
>>                | Diameter    |                  | Diameter    |
>>                | EAP Proxy   |                  | EAP Server  |
>>                |             |            ----->|             |
>>                +-------------+           /      +-------------+
>>                       ^                 /              ^
>>                    (a)| proprietary   (c)  proprietary |(b)
>>                       v               /                v
>>                +-------------+ <-----/          +-------------+
>>   Diameter ERP |             |                  |             |
>>                | Local       |    Diameter ERP  |  Home       |
>>  <------------>| Diameter    |<---------------->|  Diameter   |
>>                | ERP Server  |                  |  ERP Server |
>>                |             |                  |             |
>>                +-------------+                  +-------------+
>>  =20
>
>Note that the exchange (b) is needed anyway for the case when=20
>the peer is in its home domain.
>
>
>Does anybody have some comments on this?
>
>Thank you,
>Sebastien.
>
>
>--
>Sebastien Decugis
>Research fellow
>Network Architecture Group
>NICT (nict.go.jp)
>
>_______________________________________________
>DiME mailing list
>DiME@ietf.org
>https://www.ietf.org/mailman/listinfo/dime
>

From Hannes.Tschofenig@gmx.net  Wed Mar 18 01:51:04 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B16B63A6822 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 01:51:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.194
X-Spam-Level: 
X-Spam-Status: No, score=-2.194 tagged_above=-999 required=5 tests=[AWL=0.405,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yFXRSJ2KoQA3 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 01:51:03 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 57E0E3A6819 for <dime@ietf.org>; Wed, 18 Mar 2009 01:51:02 -0700 (PDT)
Received: (qmail invoked by alias); 18 Mar 2009 08:51:45 -0000
Received: from unknown (EHLO 4FIL42860) [192.100.124.156] by mail.gmx.net (mp066) with SMTP; 18 Mar 2009 09:51:45 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18iYBFRNCkiwCXZusGp4+TGEzQZcU86CIHCNe0Lof v3/bupzYTOcU23
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dime@ietf.org>
Date: Wed, 18 Mar 2009 10:52:56 +0200
Message-ID: <000001c9a7a6$ef268aa0$9c11a20a@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Thread-Index: AcmnWsrqB9HwTeo2Qv+6VQ5gGbPdDQATBmew
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.57
Subject: [Dime] FW: RFC 5431 on Diameter ITU-T Rw Policy Enforcement Interface Application
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Mar 2009 08:51:04 -0000

FYI 

>-----Original Message-----
>From: ietf-announce-bounces@ietf.org 
>[mailto:ietf-announce-bounces@ietf.org] On Behalf Of 
>rfc-editor@rfc-editor.org
>Sent: 18 March, 2009 01:45
>To: ietf-announce@ietf.org; rfc-dist@rfc-editor.org
>Cc: rfc-editor@rfc-editor.org
>Subject: RFC 5431 on Diameter ITU-T Rw Policy Enforcement 
>Interface Application
>
>
>A new Request for Comments is now available in online RFC libraries.
>
>        
>        RFC 5431
>
>        Title:      Diameter ITU-T Rw Policy Enforcement 
>                    Interface Application 
>        Author:     D. Sun
>        Status:     Informational
>        Date:       March 2009
>        Mailbox:    dongsun@alcatel-lucent.com
>        Pages:      5
>        Characters: 10412
>        Updates/Obsoletes/SeeAlso:   None
>
>        I-D Tag:    draft-sun-dime-itu-t-rw-02.txt
>
>        URL:        http://www.rfc-editor.org/rfc/rfc5431.txt
>
>This document describes the need for a new pair of IANA 
>Diameter Command Codes to be used in a vendor-specific new 
>application, namely for the ITU-T Rec. Q.3303.3 - Rw interface 
>used to send a request/ response for authorizing network 
>Quality of Service (QoS) resources and policy enforcement in a 
>network element, as one of the recommendations of the 
>International Telecommunication Union - Telecommunication 
>Standardization Sector (ITU-T).  This memo provides 
>information for the Internet community.
>
>
>INFORMATIONAL: This memo provides information for the Internet 
>community.
>It does not specify an Internet standard of any kind. Distribution of
>this memo is unlimited.
>
>This announcement is sent to the IETF-Announce and rfc-dist lists.
>To subscribe or unsubscribe, see
>  http://www.ietf.org/mailman/listinfo/ietf-announce
>  http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
>
>For searching the RFC series, see 
>http://www.rfc-editor.org/rfcsearch.html.
>For downloading RFCs, see http://www.rfc-editor.org/rfc.html.
>
>Requests for special distribution should be addressed to either the
>author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
>specifically noted otherwise on the RFC itself, all RFCs are for
>unlimited distribution.
>
>
>The RFC Editor Team
>USC/Information Sciences Institute
>
>
>_______________________________________________
>IETF-Announce mailing list
>IETF-Announce@ietf.org
>https://www.ietf.org/mailman/listinfo/ietf-announce
>


From hannes.tschofenig@nsn.com  Wed Mar 18 02:38:41 2009
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F418A3A68A6 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 02:38:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.141
X-Spam-Level: 
X-Spam-Status: No, score=-5.141 tagged_above=-999 required=5 tests=[AWL=0.457,  BAYES_00=-2.599, HTML_MESSAGE=0.001, J_BACKHAIR_23=1, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VQG0CMBLkmpE for <dime@core3.amsl.com>; Wed, 18 Mar 2009 02:38:40 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [217.115.75.233]) by core3.amsl.com (Postfix) with ESMTP id E05E23A684D for <dime@ietf.org>; Wed, 18 Mar 2009 02:38:39 -0700 (PDT)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n2I9dM8b023772 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <dime@ietf.org>; Wed, 18 Mar 2009 10:39:22 +0100
Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n2I9dLr5007518 for <dime@ietf.org>; Wed, 18 Mar 2009 10:39:22 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959);  Wed, 18 Mar 2009 10:39:22 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C9A7AD.6AACC93A"
Date: Wed, 18 Mar 2009 11:40:32 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B4501289AD2@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: IETF#74: draft-ietf-dime-pmip6 and draft-ietf-dime-mip6-split
Thread-Index: AcmnrZTyMX6sLefjTk+owv7TJtNvGA==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: <dime@ietf.org>
X-OriginalArrivalTime: 18 Mar 2009 09:39:22.0063 (UTC) FILETIME=[6ADA1DF0:01C9A7AD]
Subject: [Dime] IETF#74: draft-ietf-dime-pmip6 and draft-ietf-dime-mip6-split
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Mar 2009 09:38:41 -0000

This is a multi-part message in MIME format.

------_=_NextPart_001_01C9A7AD.6AACC93A
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I have put these two documents into the agenda for the meeting:=20

" =20
 * Diameter Proxy Mobile IPv6 (Jouni)
  http://tools.ietf.org/wg/dime/draft-ietf-dime-pmip6/

         =20
  Note: Will only be discussed if there are open issues.
        WGLC comments could get discussed.
=20
 * Diameter Mobile IPv6: HA<->AAA Server (Jouni)
   http://tools.ietf.org/wg/dime/draft-ietf-dime-mip6-split/
         =20
   Note: Will only be discussed if there are open issues.
         We might get comments from Dan.
"

I have not seen new comments on these documents.=20
Without new additional comments I would suggest to remove them from the
agenda for the DIME meeting.=20

Ciao
Hannes


------_=_NextPart_001_01C9A7AD.6AACC93A
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.5.7654.12">
<TITLE>IETF#74: draft-ietf-dime-pmip6 and =
draft-ietf-dime-mip6-split</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->

<P><FONT SIZE=3D4 FACE=3D"Courier New">I have put these two documents =
into the agenda for the meeting: </FONT>
</P>

<P><FONT SIZE=3D4 FACE=3D"Courier New">&quot;&nbsp; </FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp;* Diameter Proxy Mobile =
IPv6 (Jouni)</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp; </FONT><A =
HREF=3D"http://tools.ietf.org/wg/dime/draft-ietf-dime-pmip6/"><U><FONT =
COLOR=3D"#0000FF" SIZE=3D4 FACE=3D"Courier =
New">http://tools.ietf.org/wg/dime/draft-ietf-dime-pmip6/</FONT></U></A>
</P>

<P><FONT SIZE=3D4 FACE=3D"Courier =
New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp; Note: Will only be =
discussed if there are open issues.</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier =
New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; WGLC comments could get =
discussed.</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp;</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp;* Diameter Mobile IPv6: =
HA&lt;-&gt;AAA Server (Jouni)</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp;&nbsp; </FONT><A =
HREF=3D"http://tools.ietf.org/wg/dime/draft-ietf-dime-mip6-split/"><U><FO=
NT COLOR=3D"#0000FF" SIZE=3D4 FACE=3D"Courier =
New">http://tools.ietf.org/wg/dime/draft-ietf-dime-mip6-split/</FONT></U>=
</A>

<BR><FONT SIZE=3D4 FACE=3D"Courier =
New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&nbsp;&nbsp; Note: Will only be =
discussed if there are open issues.</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier =
New">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We might get =
comments from Dan.</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">&quot;</FONT>
</P>

<P><FONT SIZE=3D4 FACE=3D"Courier New">I have not seen new comments on =
these documents. </FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">Without new additional comments =
I would suggest to remove them from the agenda for the DIME meeting. =
</FONT>
</P>

<P><FONT SIZE=3D4 FACE=3D"Courier New">Ciao</FONT>

<BR><FONT SIZE=3D4 FACE=3D"Courier New">Hannes</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C9A7AD.6AACC93A--

From nrs2712@gmail.com  Wed Mar 18 10:53:55 2009
Return-Path: <nrs2712@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C3A7A3A6B10 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 10:53:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.533
X-Spam-Level: 
X-Spam-Status: No, score=-2.533 tagged_above=-999 required=5 tests=[AWL=0.064,  BAD_CREDIT=0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1fYIop885TWn for <dime@core3.amsl.com>; Wed, 18 Mar 2009 10:53:54 -0700 (PDT)
Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.228]) by core3.amsl.com (Postfix) with ESMTP id 885543A6826 for <dime@ietf.org>; Wed, 18 Mar 2009 10:53:54 -0700 (PDT)
Received: by rv-out-0506.google.com with SMTP id k40so101403rvb.49 for <dime@ietf.org>; Wed, 18 Mar 2009 10:54:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=3kztFzZNX36FtYSVKhZ7CLrATS81jtskqaCBJfr4DqU=; b=H3q/pL6PSucZPVwCevwx6r1DhWN76m3fPmla8x6wt3eRPo1FW6lSKkrH0Vd4HQ5OP0 YPveSJzhAZrToeV2vZramgF75ADhwG6CTWKCfZnOYKXoxdBh+BQJzpWm0P5d30fqjniJ 2syMrXTM0LkqP1ZRmK2Jrv+VVFIw2utxZU7ys=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=tmyYoyg2wd9rOkftcTR7oxp9Jig1X5A4MFRgFTRq84CjK0PA0yTVWH3k6JKDJbxq+1 4cdxLI/T8qLu6juw1ltAAUB2RLyAx/HCPOocP/sZsHrand1qCVxYQuirrBZ0jtJlblxW qLVEpK8Ff+EFuXMp6MIQtTZgr7Ii/8OHEwROY=
MIME-Version: 1.0
Received: by 10.141.41.12 with SMTP id t12mr273122rvj.289.1237398878621; Wed,  18 Mar 2009 10:54:38 -0700 (PDT)
In-Reply-To: <1bdcf2860903111104x1124c9c9j9e2e1ee55c18e662@mail.gmail.com>
References: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com> <000001c9a203$d546ac30$471c120a@china.huawei.com> <1bdcf2860903111104x1124c9c9j9e2e1ee55c18e662@mail.gmail.com>
Date: Wed, 18 Mar 2009 23:24:38 +0530
Message-ID: <1bdcf2860903181054vce6a025lb66d84fcfa78fe81@mail.gmail.com>
From: Ravi <nrs2712@gmail.com>
To: dime@ietf.org
Content-Type: multipart/alternative; boundary=000e0cd151fa9b0f9904656860bf
Subject: Re: [Dime] Route-Record in CCA
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Mar 2009 17:53:55 -0000

--000e0cd151fa9b0f9904656860bf
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Does anyone have any opinion on the following points?

On Wed, Mar 11, 2009 at 11:34 PM, Ravi <nrs2712@gmail.com> wrote:

> Even I had the same opinion that Route-Record need not be present in the =
answer messages.
>
> Then how do I explain this text from the bis 16.
>
> "  A local realm may wish to limit this exposure, for example, by
>    establishing credit limits for intermediate realms and refusing to
>    accept responses which would violate those limits.  By issuing an
>    accounting request corresponding to the authorization response, the
>    local realm implicitly indicates its agreement to provide the service
>    indicated in the authorization response.  If the service cannot be
>    provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
>    message MUST be sent within the accounting request;"
>
>
> If a local realm agent/node needs to refuse a response which traverses in=
termediate realms, it needs to know the path the request has traversed. How=
 would the local node know that? Is this done using Route-Record? Then shou=
ld we not update section 6.2 "Diameter Answer Processing" to say that serve=
r needs to add the Route-Record AVPs from the request to the answer?
>
>
> Another question on the same section....
>
> "If the service cannot be provided by the local realm, then a DIAMETER_UN=
ABLE_TO_COMPLY error message MUST be sent within the accounting request"
>
> How is this done? Another AVP?
>
>
> On Wed, Mar 11, 2009 at 10:12 AM, Rajith R <rajithr@huawei.com> wrote:
>
>> IMHO, checking the Route-Record AVPs in response and deciding whether th=
e
>> route is acceptable is needless b/c response path is same as request pat=
h
>> and server is anyways provisioned for checking the request path. Hence, =
no
>> need to have Route-Record AVP in responses.
>>
>> The -bis draft probably shares this view & hence has removed this text.
>>
>> Regards
>>
>> Rajith
>>
>>
>> ________________________________________
>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
>> Gowda, Avinash
>> Sent: Tuesday, March 10, 2009 11:31 PM
>> To: Ravi; dime@ietf.org
>> Subject: Re: [Dime] Route-Record in CCA
>>
>> Hi Ravi,
>>
>> Following section in RFC 3588 will answer your question.
>>
>> 2.10. Diameter Path Authorization
>> Similarly, the local Diameter agent, on receiving a Diameter response
>> authorizing a session, MUST check the Route-Record AVPs to make sure
>> that the route traversed by the response is acceptable. At each
>> step, forwarding of an authorization response is considered evidence
>> of a willingness to take on financial risk relative to the session.
>> A local realm may wish to limit this exposure, for example, by
>> establishing credit limits for intermediate realms and refusing to
>> accept responses which would violate those limits. By issuing an
>> accounting request corresponding to the authorization response, the
>> local realm implicitly indicates its agreement to provide the service
>> indicated in the authorization response. If the service cannot be
>> provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
>> message MUST be sent within the accounting request; a Diameter client
>> receiving an authorization response for a service that it cannot
>> perform MUST NOT substitute an alternate service, and then send
>> accounting requests for the alternate service instead.
>>
>> Thanks,
>> Avinash Gowda
>> ________________________________________
>> From: dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] On Behalf Of
>> Ravi
>> Sent: Tuesday, March 10, 2009 10:52 PM
>> To: dime@ietf.org
>> Subject: [Dime] Route-Record in CCA
>>
>> Hi,
>>    As per RFC  4006, the CCA message has the following ABNF format
>>
>> <Credit-Control-Answer> ::=3D < Diameter Header: 272, PXY >
>>                                   < Session-Id >
>>                                   { Result-Code }
>>                                   { Origin-Host }
>>                                   { Origin-Realm }
>>                                   { Auth-Application-Id }
>>                                   { CC-Request-Type }
>>                                   { CC-Request-Number }
>>                                   [ User-Name ]
>>                                   [ CC-Session-Failover ]
>>                                   [ CC-Sub-Session-Id ]
>>                                   [ Acct-Multi-Session-Id ]
>>                                   [ Origin-State-Id ]
>>                                   [ Event-Timestamp ]
>>                                   [ Granted-Service-Unit ]
>>                                  *[ Multiple-Services-Credit-Control ]
>>                                   [ Cost-Information]
>>                                   [ Final-Unit-Indication ]
>>                                   [ Check-Balance-Result ]
>>                                   [ Credit-Control-Failure-Handling ]
>>                                   [ Direct-Debiting-Failure-Handling ]
>>                                   [ Validity-Time]
>>                                  *[ Redirect-Host]
>>                                   [ Redirect-Host-Usage ]
>>                                   [ Redirect-Max-Cache-Time ]
>>                                  *[ Proxy-Info ]
>>                                  *[ Route-Record ]
>>                                  *[ Failed-AVP ]
>>                                  *[ AVP ]
>>
>> What is the purpose of having Route-Record AVP in CCA message? What
>> problem
>> does it solve? As far as I know, the route-record AVP can be present onl=
y
>> in
>> requests.
>>
>>
>>
>

--000e0cd151fa9b0f9904656860bf
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Does anyone have any opinion on the following points?<br><br><div class=3D"=
gmail_quote">On Wed, Mar 11, 2009 at 11:34 PM, Ravi <span dir=3D"ltr">&lt;<=
a href=3D"mailto:nrs2712@gmail.com">nrs2712@gmail.com</a>&gt;</span> wrote:=
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex;"><span style=3D"font-family:&#39;times new r=
oman&#39;;font-size:16px"><pre style=3D"word-wrap:break-word;white-space:pr=
e-wrap">
Even I had the same opinion that Route-Record need not be present in the an=
swer messages.</pre>
<pre style=3D"word-wrap:break-word;white-space:pre-wrap">Then how do I expl=
ain this text from the bis 16.</pre><div class=3D"im"><pre style=3D"word-wr=
ap:break-word;white-space:pre-wrap">&quot;  A local realm may wish to limit=
 this exposure, for example, by
   establishing credit limits for intermediate realms and refusing to
   accept responses which would violate those limits.  By issuing an
   accounting request corresponding to the authorization response, the
   local realm implicitly indicates its agreement to provide the service
   indicated in the authorization response.  If the service cannot be
   provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error
   message MUST be sent within the accounting request;&quot;</pre><pre styl=
e=3D"word-wrap:break-word;white-space:pre-wrap"><br></pre></div><pre style=
=3D"word-wrap:break-word;white-space:pre-wrap">If a local realm agent/node =
needs to refuse a response which traverses intermediate realms, it needs to=
 know the path the request has traversed. How would the local node know tha=
t? Is this done using Route-Record? Then should we not update section 6.2 &=
quot;Diameter Answer Processing&quot; to say that server needs to add the R=
oute-Record AVPs from the request to the answer?</pre>

<pre style=3D"word-wrap:break-word;white-space:pre-wrap"><span style=3D"fon=
t-family:&#39;times new roman&#39;;white-space:normal"><pre style=3D"word-w=
rap:break-word;white-space:pre-wrap"><br></pre><pre style=3D"word-wrap:brea=
k-word;white-space:pre-wrap">
Another question on the same section....</pre></span></pre><div class=3D"im=
"><pre style=3D"word-wrap:break-word;white-space:pre-wrap"><span style=3D"f=
ont-family:&#39;times new roman&#39;;white-space:normal"><pre style=3D"word=
-wrap:break-word;white-space:pre-wrap">
&quot;If the service cannot be provided by the local realm, then a DIAMETER=
_UNABLE_TO_COMPLY error message MUST be sent within the accounting request&=
quot;</pre></span></pre></div><pre style=3D"word-wrap:break-word;white-spac=
e:pre-wrap">
How is this done? Another AVP?</pre></span><div><div></div><div class=3D"h5=
"><br><div class=3D"gmail_quote">On Wed, Mar 11, 2009 at 10:12 AM, Rajith R=
 <span dir=3D"ltr">&lt;<a href=3D"mailto:rajithr@huawei.com" target=3D"_bla=
nk">rajithr@huawei.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
IMHO, checking the Route-Record AVPs in response and deciding whether the<b=
r>
route is acceptable is needless b/c response path is same as request path<b=
r>
and server is anyways provisioned for checking the request path. Hence, no<=
br>
need to have Route-Record AVP in responses.<br>
<br>
The -bis draft probably shares this view &amp; hence has removed this text.=
<br>
<br>
Regards<br>
<br>
Rajith<br>
<br>
<br>
________________________________________<br>
<div>From: <a href=3D"mailto:dime-bounces@ietf.org" target=3D"_blank">dime-=
bounces@ietf.org</a> [mailto:<a href=3D"mailto:dime-bounces@ietf.org" targe=
t=3D"_blank">dime-bounces@ietf.org</a>] On Behalf Of<br>
</div>Gowda, Avinash<br>
Sent: Tuesday, March 10, 2009 11:31 PM<br>
To: Ravi; <a href=3D"mailto:dime@ietf.org" target=3D"_blank">dime@ietf.org<=
/a><br>
Subject: Re: [Dime] Route-Record in CCA<br>
<div><div></div><div><br>
Hi Ravi,<br>
<br>
Following section in RFC 3588 will answer your question.<br>
<br>
2.10. Diameter Path Authorization<br>
Similarly, the local Diameter agent, on receiving a Diameter response<br>
authorizing a session, MUST check the Route-Record AVPs to make sure<br>
that the route traversed by the response is acceptable. At each<br>
step, forwarding of an authorization response is considered evidence<br>
of a willingness to take on financial risk relative to the session.<br>
A local realm may wish to limit this exposure, for example, by<br>
establishing credit limits for intermediate realms and refusing to<br>
accept responses which would violate those limits. By issuing an<br>
accounting request corresponding to the authorization response, the<br>
local realm implicitly indicates its agreement to provide the service<br>
indicated in the authorization response. If the service cannot be<br>
provided by the local realm, then a DIAMETER_UNABLE_TO_COMPLY error<br>
message MUST be sent within the accounting request; a Diameter client<br>
receiving an authorization response for a service that it cannot<br>
perform MUST NOT substitute an alternate service, and then send<br>
accounting requests for the alternate service instead.<br>
<br>
Thanks,<br>
Avinash Gowda<br>
________________________________________<br>
From: <a href=3D"mailto:dime-bounces@ietf.org" target=3D"_blank">dime-bounc=
es@ietf.org</a> [mailto:<a href=3D"mailto:dime-bounces@ietf.org" target=3D"=
_blank">dime-bounces@ietf.org</a>] On Behalf Of Ravi<br>
Sent: Tuesday, March 10, 2009 10:52 PM<br>
To: <a href=3D"mailto:dime@ietf.org" target=3D"_blank">dime@ietf.org</a><br=
>
Subject: [Dime] Route-Record in CCA<br>
<br>
Hi,<br>
=A0=A0 As per RFC =A04006, the CCA message has the following ABNF format<br=
>
<br>
&lt;Credit-Control-Answer&gt; ::=3D &lt; Diameter Header: 272, PXY &gt;<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0&lt; =
Session-Id &gt;<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Res=
ult-Code }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Ori=
gin-Host }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Ori=
gin-Realm }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ Aut=
h-Application-Id }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ CC-=
Request-Type }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0{ CC-=
Request-Number }<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Use=
r-Name ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ CC-=
Session-Failover ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ CC-=
Sub-Session-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Acc=
t-Multi-Session-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Ori=
gin-State-Id ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Eve=
nt-Timestamp ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Gra=
nted-Service-Unit ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Multi=
ple-Services-Credit-Control ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Cos=
t-Information]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Fin=
al-Unit-Indication ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Che=
ck-Balance-Result ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Cre=
dit-Control-Failure-Handling ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Dir=
ect-Debiting-Failure-Handling ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Val=
idity-Time]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Redir=
ect-Host]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Red=
irect-Host-Usage ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0[ Red=
irect-Max-Cache-Time ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Proxy=
-Info ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Route=
-Record ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ Faile=
d-AVP ]<br>
=A0=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 *[ AVP ]=
<br>
<br>
What is the purpose of having Route-Record AVP in CCA message? What problem=
<br>
does it solve? As far as I know, the route-record AVP can be present only i=
n<br>
requests.<br>
<br>
<br>
</div></div></blockquote></div><br>
</div></div></blockquote></div><br>

--000e0cd151fa9b0f9904656860bf--

From sdecugis@nict.go.jp  Wed Mar 18 18:33:08 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CFEE28C1F1 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 18:33:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.059
X-Spam-Level: 
X-Spam-Status: No, score=0.059 tagged_above=-999 required=5 tests=[AWL=0.149,  BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lqMQo9+HB0d8 for <dime@core3.amsl.com>; Wed, 18 Mar 2009 18:33:07 -0700 (PDT)
Received: from ns1.nict.go.jp (ns1.nict.go.jp [133.243.3.1]) by core3.amsl.com (Postfix) with ESMTP id 9037B3A6AB8 for <dime@ietf.org>; Wed, 18 Mar 2009 18:33:07 -0700 (PDT)
Received: from gw1.nict.go.jp (gw1 [133.243.18.250]) by ns1.nict.go.jp  with ESMTP id n2J1TvH1006872; Thu, 19 Mar 2009 10:29:57 +0900 (JST)
Received: from gw1.nict.go.jp (localhost [127.0.0.1]) by gw1.nict.go.jp  with ESMTP id n2J1TvD0006870; Thu, 19 Mar 2009 10:29:57 +0900 (JST)
Received: from mail1.nict.go.jp (mail.nict.go.jp [133.243.18.3]) by gw1.nict.go.jp  with ESMTP id n2J1Tv4r006867; Thu, 19 Mar 2009 10:29:57 +0900 (JST)
Received: from mail1.nict.go.jp (localhost [127.0.0.1]) by localhost.nict.go.jp (Postfix) with ESMTP id 1DB944224; Thu, 19 Mar 2009 10:29:57 +0900 (JST)
Received: from [133.243.146.166] (5gou2f-dhcp06.nict.go.jp [133.243.146.166]) by mail1.nict.go.jp (Postfix) with ESMTP id E4AB74217; Thu, 19 Mar 2009 10:29:56 +0900 (JST)
Message-ID: <49C1A005.5020702@nict.go.jp>
Date: Thu, 19 Mar 2009 10:29:41 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Ravi <nrs2712@gmail.com>
References: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com>	<000001c9a203$d546ac30$471c120a@china.huawei.com>	<1bdcf2860903111104x1124c9c9j9e2e1ee55c18e662@mail.gmail.com> <1bdcf2860903181054vce6a025lb66d84fcfa78fe81@mail.gmail.com>
In-Reply-To: <1bdcf2860903181054vce6a025lb66d84fcfa78fe81@mail.gmail.com>
X-Enigmail-Version: 0.95.7
OpenPGP: id=33D9F61D
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: dime@ietf.org
Subject: Re: [Dime] Route-Record in any Diameter anwer (was: CCA)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2009 01:33:08 -0000

Hi,

> Does anyone have any opinion on the following points?
I agree that Route-Record in a Diameter Answer would bring additional
security (via tracability).

When the server sends the answer with a success result code, it
implicitly indicates that it trusts the path of the request (same as the
path of the answer).
When the local agent receive the answers, it contains the identity of
the sender.
One could assume that indirect trust is established:  local agent ->
home server -> path.

Anyway, if an untrusted relay receives the request and forges an answer,
it can fake the Origin-Host of the reply. The local agent has no mean to
detect this if no Route-Record is in the answer.

IMHO, the question is: in what extent do we trust the hop-by-hop
security mechanism (TLS or IPsec)?

Best regards,
Sebastien.

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)


From sdecugis@nict.go.jp  Wed Mar 18 19:04:37 2009
Return-Path: <sdecugis@nict.go.jp>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2582228C23E; Wed, 18 Mar 2009 19:04:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.034
X-Spam-Level: 
X-Spam-Status: No, score=0.034 tagged_above=-999 required=5 tests=[AWL=0.124,  BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vOaRQa6EXPDk; Wed, 18 Mar 2009 19:04:36 -0700 (PDT)
Received: from ns1.nict.go.jp (ns1.nict.go.jp [133.243.3.1]) by core3.amsl.com (Postfix) with ESMTP id EB07D28C179; Wed, 18 Mar 2009 19:04:35 -0700 (PDT)
Received: from gw1.nict.go.jp (gw1 [133.243.18.250]) by ns1.nict.go.jp  with ESMTP id n2J21Z97008946; Thu, 19 Mar 2009 11:01:35 +0900 (JST)
Received: from gw1.nict.go.jp (localhost [127.0.0.1]) by gw1.nict.go.jp  with ESMTP id n2J21Z6K011584; Thu, 19 Mar 2009 11:01:35 +0900 (JST)
Received: from mail2.nict.go.jp (mail.nict.go.jp [133.243.18.3]) by gw1.nict.go.jp  with ESMTP id n2J21Zuw011581; Thu, 19 Mar 2009 11:01:35 +0900 (JST)
Received: from mail2.nict.go.jp (localhost [127.0.0.1]) by localhost.nict.go.jp (Postfix) with ESMTP id 61D1C6E49; Thu, 19 Mar 2009 11:01:35 +0900 (JST)
Received: from [133.243.146.166] (5gou2f-dhcp06.nict.go.jp [133.243.146.166]) by mail2.nict.go.jp (Postfix) with ESMTP id 264666ED3; Thu, 19 Mar 2009 11:01:35 +0900 (JST)
Message-ID: <49C1A76F.4080809@nict.go.jp>
Date: Thu, 19 Mar 2009 11:01:19 +0900
From: Sebastien Decugis <sdecugis@nict.go.jp>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: "dime@ietf.org" <dime@ietf.org>
X-Enigmail-Version: 0.95.7
OpenPGP: id=33D9F61D
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: hokey@ietf.org
Subject: [Dime] Diameter ERP new proposal
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2009 02:04:37 -0000

Hello DIME and HOKEY members,

Following the recent discussions about an alternative design for
Diameter ERP support, I have written a small proposal for a new design [1].

In a row, we use a new Diameter application (Diameter ERP) and DER/DEA
commands to transport ERP messages between the authenticator and the ER
server.
We also describe how Diameter EAP application and DER/DEA commands can
be used between ER server and home EAP server, but other options are
allowed.

The document is not a "clean" Internet-Draft, its purpose is to get
feedback from the groups on this design.
If the feedback is positive then this design will be used for
draft-ietf-dime-erp-01.

If you are interested in ERP and Diameter, please read this before next
IETF meeting (#74) so that we can have an informed discussion.

[1]
http://aaa.koganei.wide.ad.jp/hg/erp_draft/raw-file/tip/New_ERP_draft.txt

Best regards,
Sebastien.

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)


From sunseawq@huawei.com  Thu Mar 19 06:04:53 2009
Return-Path: <sunseawq@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C74DF28C26C; Thu, 19 Mar 2009 06:04:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.399
X-Spam-Level: 
X-Spam-Status: No, score=0.399 tagged_above=-999 required=5 tests=[AWL=-0.859,  BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,  MIME_BASE64_TEXT=1.753, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jqcWReQwh-mg; Thu, 19 Mar 2009 06:04:53 -0700 (PDT)
Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id BBCE428C12F; Thu, 19 Mar 2009 06:04:52 -0700 (PDT)
Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGR00FX08D30C@szxga03-in.huawei.com>; Thu, 19 Mar 2009 21:05:27 +0800 (CST)
Received: from huawei.com ([172.24.1.33]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KGR005XL8D3H7@szxga03-in.huawei.com>; Thu, 19 Mar 2009 21:05:27 +0800 (CST)
Received: from w53375a ([10.164.12.27]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KGR004HG8D2Y7@szxml06-in.huawei.com>; Thu, 19 Mar 2009 21:05:27 +0800 (CST)
Date: Thu, 19 Mar 2009 21:05:26 +0800
From: Qin Wu <sunseawq@huawei.com>
To: Sebastien Decugis <sdecugis@nict.go.jp>
Message-id: <00a101c9a893$5f6ce240$1b0ca40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: base64
X-Priority: 3
X-MSMail-priority: Normal
References: <5e2406980903032305k48ad83b7r1015e61c6ed983ae@mail.gmail.com> <020e01c99ca1$3b704150$2fb4b70a@nsnintra.net> <5e2406980903040203i26ab161bs3f221dc4ac03ed7@mail.gmail.com> <021601c99f18$ee622250$0201a8c0@nsnintra.net> <5e2406980903100314ycaf2a26mebff07d6e8ad395a@mail.gmail.com> <006b01c9a19e$aa68cf30$ff3a6d90$@net> <07ce01c9a1a1$5a8daa50$0201a8c0@nsnintra.net> <024d01c9a2e7$6708e0f0$1b0ca40a@china.huawei.com> <5e2406980903120206h5d80503bw46edbc3388105516@mail.gmail.com> <5e2406980903120245q38774445l6a1a17a5f4594e26@mail.gmail.com> <49B8F6AC.7010905@nict.go.jp> <04b501c9a3a9$2f99f830$1b0ca40a@china.huawei.com> <49BF3D9D.1040101@nict.go.jp>
Cc: dime@ietf.org, hokey@ietf.org
Subject: Re: [Dime] [HOKEY] DiME ERP: new Application ID or not	?(non-roaming case)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2009 13:04:53 -0000
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From jouni.nospam@gmail.com  Thu Mar 19 07:03:11 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7236C28C12F for <dime@core3.amsl.com>; Thu, 19 Mar 2009 07:03:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.599
X-Spam-Level: 
X-Spam-Status: No, score=-1.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_BACKHAIR_23=1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RUbMDQAzuicY for <dime@core3.amsl.com>; Thu, 19 Mar 2009 07:03:10 -0700 (PDT)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.29]) by core3.amsl.com (Postfix) with ESMTP id 90CFF3A6BD3 for <dime@ietf.org>; Thu, 19 Mar 2009 07:03:10 -0700 (PDT)
Received: by yw-out-2324.google.com with SMTP id 5so748237ywh.49 for <dime@ietf.org>; Thu, 19 Mar 2009 07:03:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=T4hcjEnpYf00UwFe8STj/1Ou9Ku64ixVca/Xxp1NzeU=; b=aTqAuKs6iNXAbT/aG2VTo33Sq2pVKvBvuFePtKu6jcEF3OeSpXAtEzUenesLVUkaXF qcZo9+Epw0f1kRcqaytwuMBx/rjSuiaXRodmUrUQab6Xi6nxEY8uBJBtG/Yp2hChuPz9 chPXqX+Exu+Hgj/GmYVYEiwugkOauN4g2M91I=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=TAwQV8NoKELQXE6u56KVX+DyY2YxTw+XyUU2Z77wVHmULfTkW/Zckl98l1yJWloROv WtK43KAH6fH/KLpZ6Xx/Cd9fALaQQwh1kt1eVRZH8RCzDxgplccF5ZRHWi6qTGU82GzI gVRgqkgGEKVuU9yZPO0AOEA/89XsObg3iYjsM=
Received: by 10.143.4.11 with SMTP id g11mr940263wfi.340.1237471435375; Thu, 19 Mar 2009 07:03:55 -0700 (PDT)
Received: from ?192.168.0.20? (207.47.37.29.static.nextweb.net [207.47.37.29]) by mx.google.com with ESMTPS id 32sm1675977wfc.49.2009.03.19.07.03.53 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 19 Mar 2009 07:03:54 -0700 (PDT)
Message-Id: <AA2376EE-1551-41EA-8679-A5E37EE1AC04@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
In-Reply-To: <3D3C75174CB95F42AD6BCC56E5555B4501289AD2@FIESEXC015.nsn-intra.net>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Thu, 19 Mar 2009 16:03:52 +0200
References: <3D3C75174CB95F42AD6BCC56E5555B4501289AD2@FIESEXC015.nsn-intra.net>
X-Mailer: Apple Mail (2.930.3)
Cc: dime@ietf.org
Subject: Re: [Dime] IETF#74: draft-ietf-dime-pmip6 and draft-ietf-dime-mip6-split
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2009 14:03:11 -0000

Hi Hannes,

On Mar 18, 2009, at 11:40 AM, Tschofenig, Hannes (NSN - FI/Espoo) wrote:

> I have put these two documents into the agenda for the meeting:
>
> "
>  * Diameter Proxy Mobile IPv6 (Jouni)
>   http://tools.ietf.org/wg/dime/draft-ietf-dime-pmip6/
>
>
>   Note: Will only be discussed if there are open issues.
>         WGLC comments could get discussed.
>

I could probably say a word or two on this I-D. Although most of the  
changes between -00 and -01 were editorial in nature, they were  
plenty. No open issues what so ever have showed up.

Cheers,
	Jouni


>
>
>  * Diameter Mobile IPv6: HA<->AAA Server (Jouni)
>    http://tools.ietf.org/wg/dime/draft-ietf-dime-mip6-split/
>
>    Note: Will only be discussed if there are open issues.
>          We might get comments from Dan.
> "
>
> I have not seen new comments on these documents.
> Without new additional comments I would suggest to remove them from  
> the agenda for the DIME meeting.
>
> Ciao
> Hannes
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime


From nrs2712@gmail.com  Sat Mar 21 09:03:26 2009
Return-Path: <nrs2712@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 677CC3A67B6 for <dime@core3.amsl.com>; Sat, 21 Mar 2009 09:03:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R41r5vQJEyvW for <dime@core3.amsl.com>; Sat, 21 Mar 2009 09:03:25 -0700 (PDT)
Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.31]) by core3.amsl.com (Postfix) with ESMTP id 22F863A679C for <dime@ietf.org>; Sat, 21 Mar 2009 09:03:25 -0700 (PDT)
Received: by yw-out-2324.google.com with SMTP id 5so2198214ywh.49 for <dime@ietf.org>; Sat, 21 Mar 2009 09:04:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=ZNEx7eVI0t4xPyigUn3Bn59QRbwNai0+92AJB66rabs=; b=uLsJcqY9aSi3kOt1zdP/m7FTCPYjnSpgqIX/7qMVXr3zjf+1FFBY28nmTmz2wGuALT DZbzpdrUJ0sGL7MxW4qbxtbUOuOO3wmGe5Df8hmzXi9ZhuLdUlkJXYRGlJqSiyCGohDh HHE3SyIt8rb3P4BvNmnU0TjqrDfCPvNZezYCo=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=qKk4n0KY8s5UbohAhZFc3uKlfkPemh6Uc+tdDhk3D/MjZh6SrRYiWoUW6CU98GIiH0 9WIwFhoiX4YsvyKel+ar+5vl31ujgjK2UOrNIDdEuON5zwdFmj4CBosYz0Csg/P5o1ja c/ZkLy0BLd52Wh3S0r1iOWpp9L8s0QuUyHqyk=
MIME-Version: 1.0
Received: by 10.100.249.10 with SMTP id w10mr3951052anh.3.1237651452271; Sat,  21 Mar 2009 09:04:12 -0700 (PDT)
In-Reply-To: <49C1A005.5020702@nict.go.jp>
References: <69FADB84C90B1248A7DE59422771FA0C0CC68CAB@exchindia3.starentnetworks.com> <000001c9a203$d546ac30$471c120a@china.huawei.com> <1bdcf2860903111104x1124c9c9j9e2e1ee55c18e662@mail.gmail.com> <1bdcf2860903181054vce6a025lb66d84fcfa78fe81@mail.gmail.com> <49C1A005.5020702@nict.go.jp>
Date: Sat, 21 Mar 2009 21:34:12 +0530
Message-ID: <1bdcf2860903210904l79c86ec0q3e658c1aeaa1825d@mail.gmail.com>
From: Ravi <nrs2712@gmail.com>
To: Sebastien Decugis <sdecugis@nict.go.jp>
Content-Type: multipart/alternative; boundary=0016368e1d222b239b0465a32f72
Cc: dime@ietf.org
Subject: Re: [Dime] Route-Record in any Diameter anwer (was: CCA)
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 21 Mar 2009 16:03:26 -0000

--0016368e1d222b239b0465a32f72
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

IMO there are two things which we are discussing

1) ABNF defined for some answer messages in some RFCs has Route-Record AVP
present in it
       for example CCA in 4006
                  The common understanding that we have now is that this is
needed for path authorization by the diameter home realm, though this is not
explicitly mentioned in the RFC. The procedures that need to be performed at
the diameter server are not defined in this case. Was this the original
intent of having a Route-Record AVP in the CCA message?

2) Extending the Route-Record AVP mechanism for path authorization by the
home realm. Do we need to add this to the 3588 bis?

I hope the experts can provide their opinions on this.


On Thu, Mar 19, 2009 at 6:59 AM, Sebastien Decugis <sdecugis@nict.go.jp>wrote:

> Hi,
>
> > Does anyone have any opinion on the following points?
> I agree that Route-Record in a Diameter Answer would bring additional
> security (via tracability).
>
> When the server sends the answer with a success result code, it
> implicitly indicates that it trusts the path of the request (same as the
> path of the answer).
> When the local agent receive the answers, it contains the identity of
> the sender.


> One could assume that indirect trust is established:  local agent ->
> home server -> path.
>
> Anyway, if an untrusted relay receives the request and forges an answer,
> it can fake the Origin-Host of the reply. The local agent has no mean to
> detect this if no Route-Record is in the answer.
>
> IMHO, the question is: in what extent do we trust the hop-by-hop
> security mechanism (TLS or IPsec)?
>
> Best regards,
> Sebastien.
>
> --
> Sebastien Decugis
> Research fellow
> Network Architecture Group
> NICT (nict.go.jp)
>
>

--0016368e1d222b239b0465a32f72
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div>IMO there are two things which we are discussing</div>
<div>=A0</div>
<div>1) ABNF defined for some answer messages=A0in some RFCs has Route-Reco=
rd AVP present in it</div>
<div>=A0=A0=A0=A0=A0=A0 for example CCA in 4006</div>
<div>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0The common under=
standing that we have now is that this is needed for path authorization by =
the diameter home realm, though this is not explicitly mentioned in the RFC=
. The procedures that need to be performed at the diameter server are not d=
efined in this case. Was this the original intent of having a Route-Record =
AVP in the CCA message?</div>

<div>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0<br>2) Extending the Route-Record =
AVP mechanism for path authorization by the home realm. Do we need to add t=
his to the 3588 bis?</div>
<div>=A0</div>
<div>I hope the experts can provide their opinions on this.</div>
<div><br>=A0</div>
<div class=3D"gmail_quote">On Thu, Mar 19, 2009 at 6:59 AM, Sebastien Decug=
is <span dir=3D"ltr">&lt;<a href=3D"mailto:sdecugis@nict.go.jp" target=3D"_=
blank">sdecugis@nict.go.jp</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"PADDING-LEFT: 1ex; MARGIN: 0px 0=
px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Hi,<br><br>&gt; Does anyone have=
 any opinion on the following points?<br>I agree that Route-Record in a Dia=
meter Answer would bring additional<br>
security (via tracability).<br><br>When the server sends the answer with a =
success result code, it<br>implicitly indicates that it trusts the path of =
the request (same as the<br>path of the answer).<br>When the local agent re=
ceive the answers, it contains the identity of<br>
the sender.</blockquote>
<blockquote class=3D"gmail_quote" style=3D"PADDING-LEFT: 1ex; MARGIN: 0px 0=
px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><br>One could assume that indire=
ct trust is established: =A0local agent -&gt;<br>home server -&gt; path.<br=
>
<br>Anyway, if an untrusted relay receives the request and forges an answer=
,<br>it can fake the Origin-Host of the reply. The local agent has no mean =
to<br>detect this if no Route-Record is in the answer.<br><br>IMHO, the que=
stion is: in what extent do we trust the hop-by-hop<br>
security mechanism (TLS or IPsec)?<br><br>Best regards,<br>Sebastien.<br><f=
ont color=3D"#888888"><br>--<br>Sebastien Decugis<br>Research fellow<br>Net=
work Architecture Group<br>NICT (<a href=3D"http://nict.go.jp/" target=3D"_=
blank">nict.go.jp</a>)<br>
<br></font></blockquote></div><br>

--0016368e1d222b239b0465a32f72--

From Hannes.Tschofenig@gmx.net  Mon Mar 23 07:31:05 2009
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9FC283A67E7 for <dime@core3.amsl.com>; Mon, 23 Mar 2009 07:31:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Level: 
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[AWL=0.604,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2eXoKoJAD2WC for <dime@core3.amsl.com>; Mon, 23 Mar 2009 07:31:04 -0700 (PDT)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id 4150C3A67DD for <dime@ietf.org>; Mon, 23 Mar 2009 07:31:04 -0700 (PDT)
Received: (qmail invoked by alias); 23 Mar 2009 14:31:53 -0000
Received: from dhcp-43b3.meeting.ietf.org (EHLO 4FIL42860) [130.129.67.179] by mail.gmx.net (mp048) with SMTP; 23 Mar 2009 15:31:53 +0100
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX18o1V58zMMovQl5K+OlLE5g4pu+Fiz7XvcfXdWwNh HXZujHn3C3cIAd
From: "Hannes Tschofenig" <Hannes.Tschofenig@gmx.net>
To: <dime@ietf.org>
Date: Mon, 23 Mar 2009 07:33:05 -0700
Message-ID: <007901c9abc4$48d99ad0$f7148182@nsnintra.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcmqeCwiBTbkqSCdR1KGZF0ZrSNq2ABS06Wg
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.6
Subject: [Dime] FW: Audio Streams for IETF 74 in San FranciscoECRIT
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2009 14:31:05 -0000

FYI 

Jabber for the meeting:  dime@jabber.ietf.org

>-----Original Message-----
>From: ietf-bounces@ietf.org [mailto:ietf-bounces@ietf.org] On 
>Behalf Of Morgan Sackett
>Sent: 21 March, 2009 15:55
>To: ietf@ietf.org
>Subject: Audio Streams for IETF 74 in San Francisco
>
>There will be MP3 audio streams of the meetings happening in 
>the breakout rooms.  Specifically these are
>
>Continental 1&2
>Continental 3
>Continental 4
>Continental 5
>Continental 6
>Imperial A
>Imperial B
>Franciscan A
>
>Please refer to the online agenda at 
>http://tools.ietf.org/agenda/74/ to find a link to the stream 
>for each session.
>
>If there are concerns about the audio streams, there are a few 
>ways to get our attention.  Via email either 
>audio@meeting.ietf.org, or noc@meeting.ietf.org .  Via XMPP at 
>noc@jabber.ietf.org.
>
>Morgan Sackett
>VP of Engineering
>
>VeriLAN Event Services, Inc.
>215 SE Morrison Street
>Portland, OR 97214
>
>Tel: 503 907-1415
>Fax: 503 224-8833
>
>msackett@verilan.com
>www.verilan.com
>
>
>This e-mail contains proprietary information and may be confidential.  
>If you are not the intended recipient of this e-mail, you are 
>hereby notified that any dissemination, distribution or 
>copying of this message is strictly prohibited. If you 
>received this message in error, please delete it immediately.
>
>
>
>
>_______________________________________________
>Ietf mailing list
>Ietf@ietf.org
>https://www.ietf.org/mailman/listinfo/ietf
>


From lionel.morand@orange-ftgroup.com  Mon Mar 23 18:59:36 2009
Return-Path: <lionel.morand@orange-ftgroup.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1F02328C1A8 for <dime@core3.amsl.com>; Mon, 23 Mar 2009 18:59:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.449
X-Spam-Level: 
X-Spam-Status: No, score=-3.449 tagged_above=-999 required=5 tests=[AWL=-0.200, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id le5MaMCG-SQ0 for <dime@core3.amsl.com>; Mon, 23 Mar 2009 18:59:34 -0700 (PDT)
Received: from p-mail2.rd.francetelecom.com (p-mail2.rd.francetelecom.com [195.101.245.16]) by core3.amsl.com (Postfix) with ESMTP id D428D28C10B for <dime@ietf.org>; Mon, 23 Mar 2009 18:59:33 -0700 (PDT)
Received: from FTRDMEL2.rd.francetelecom.fr ([10.192.128.41]) by ftrdsmtp1.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.3959);  Tue, 24 Mar 2009 03:00:21 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 24 Mar 2009 03:00:18 +0100
Message-ID: <7DBAFEC6A76F3E42817DF1EBE64CB0260652F985@ftrdmel2>
In-Reply-To: <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [Dime] Dime NAI Routing
Thread-Index: AcmjAM0iM+dQ4vS9QRmQv5KJ0eVjJgJICTRw
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com><33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com><8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com><AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com> <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com>
From: <lionel.morand@orange-ftgroup.com>
To: <jouni.nospam@gmail.com>, <avi@bridgewatersystems.com>
X-OriginalArrivalTime: 24 Mar 2009 02:00:21.0999 (UTC) FILETIME=[4A2C57F0:01C9AC24]
Cc: Mark.Jones@bridgewatersystems.com, dime@ietf.org
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Mar 2009 01:59:36 -0000

Simple question:

All the decorated NAI handling described in the draft is based on the =
fact that there are "pre-existing" AAA roaming agreements between =
partners, established long before the first access request for a given =
user.

Could we just assume that all the partners belonging to AAA roaming =
agreements (and used by the UE to construct the Decorated NAI) MUST =
support the NAI Decoration?
If one of them doesn't support the NAI decoration, the handling of the =
request will fail but, in that case, this network should not be part of =
the roaming agreements. That is, "MUST" is a must if you want to be part =
of the game.

What we are saying here is that something could be wrong if someone does =
bad things. However, the basic principle of roaming agreements is that =
everyone plays the same game, with the rules, with the same part.

Lionel

> -----Message d'origine-----
> De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De=20
> la part de jouni korhonen
> Envoy=E9 : jeudi 12 mars 2009 11:53
> =C0 : Avi Lior
> Cc : Mark Jones; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> Objet : Re: [Dime] Dime NAI Routing
>=20
>=20
>=20
> I had some more thoughts around Avi's proposal and made a=20
> small summary and comparison of pros & cons. NAIdime means=20
> the solution proposed in the Dime draft. NAIavi is Avi's proposal.
>=20
> 1) All intermediates and peers support their own proposed=20
> solutions and
>     no new application
>     - Both NAIdime & NAIavi work fine
>=20
> 2) Some intermediates do not support NAI decoration, the=20
> destination Diameter server
>     supports NAI decoration and no new application
>     - NAIdime causes an "early" consumption of the request,=20
> which would
>       cause the auth/authz fail in all realistic situations
>     - NAIavi would cause a routing loop and auth/authz to=20
> fail in all realistic
>       situations. However, this applies only if there are=20
> more than one intermediate
>       realms and the non-supporting realm is not next to the=20
> final destination.
>=20
> 3) Some intermediates do not support NAI decoration, the=20
> destination Diameter server
>     does not support NAI decoration and no new application
>     - NAIdime has the same issue as in 2)
>     - NAIavi auth/authz probably fails as the User-Name does=20
> not correspond to the
>       user identity (it is still decorated). This depends on=20
> the used auth/authz
>       method though.
>=20
> 4) Some intermediates do not support NAI decoration, the=20
> destination Diameter server
>     supports NAI decoration, new application
>     - Both NAIdime & NAIavi work ok (non-supporting agents=20
> get bypassed)
>=20
> 5) Some intermediates do not support NAI decoration, the=20
> destination Diameter server
>     does not supports NAI decoration, new application
>     - not applicable
>=20
> 6) Routing "processing" in an agent that supports NAI routing
>     - NAIdime modifies both User-Name and Destination-realm. Final
>       routing decision still based on=20
> Destination-Realm+Application-id as
>       defined in unmodified rfc3588.
>     - NAIavi modifies only the User-Name. Final routing decision needs
>       modifications to rfc3588 request routing as sometimes=20
> the routing
>       is done based on the User-Name+Application-id and=20
> sometimes based
>       on the Destination-Realm+Application-id.
>=20
>=20
> DId I miss some scenario? Or did I get some scenario wrong?
>=20
> Summarizing the above:
>=20
> 1) is trivial and probably the desired deployment scenario.
> 4) NAI routing coupled with a new application is the safe choice. Both
>     NAIdime & NAIavi always work OK.
> 3) is a valid scenario where both NAIdime & NAIavi have issues. NAIavi
>     has probably less issues depending on the used auth/authz method.
> 2) here NAIavi has an advantage. From a protocol point of=20
> view it is not ok to
>     define a solution that is known to break in other than a=20
> naive deployment
>     scenario. From a practical point of view, I think the=20
> naive deployment
>     scenario is probably what gets deployed in real life. However, one
>     could never be sure.
> 6) NAIavi probably requires more code changes in the existing=20
> rfc3588 code base.
>     This could be a theoretical disadvantage though. I cannot=20
> really judge
>     the amount of work required in other's products.
>=20
> So.. comments? Honestly, I tried to be objective ;)
>=20
> Cheers,
> 	Jouni
>=20
>=20
>=20
> On Mar 11, 2009, at 12:38 AM, jouni wrote:
>=20
> > Hi Avi,
> >
> > Thanks for the valuable input. See some comments inline.
> >
> > On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:
> >
> >> I have inline comments as well as new comment:
> >>
> >> The over arching problem as I see it is that when you read the=20
> >> document, at least the introduction and abstract you get the sense=20
> >> that the draft is intending to fix base diameter behavior.
> >
> > That is the intent.
> >
> >>
> >> But in responses I get, I get the feeling that the intent=20
> is really=20
> >> to have an Application based routing scheme using NAI.
> >>
> >
> > Applications are recommended for cases where the requests=20
> pass through=20
> > realms/networks where one cannot always claim that "all my agents=20
> > implement RFC3588 + RFC-NAI-Routing". If you know that your=20
> networks=20
> > support RFC3588 + RFC-NAI-Routing, there is no need to go for a new=20
> > application. Section 4.3 is a recommendation for backwards=20
> > compatibility.
> >
> >
> >>
> >> If you are trying to fix base then we need a robust backwards=20
> >> compatible way of doing things.  As well, we can argue=20
> whether or not=20
> >> it should be placed in DIME.  There is more work to do.
> >
> > We at least seem to agree that something needs to be done ;)
> >
> >>
> >> If you are trying to write a document that describes how=20
> one would do=20
> >> Application routing using NAI. Then that does not belong=20
> in base so=20
> >> we should stop debating that.  And actually in this case=20
> what you are=20
> >> doing is fine and you are probably there.
> >>
> >> So which is it?  And once we pick we should be clear in the text.
> >
> > Definitely this is not about doing only application routing=20
> using NAI.=20
> > One of the goals is to be able to request a vendor e.g. "give me an=20
> > agent that implements RFC3588/RFC-NAI-Routing", without being more=20
> > specific on applications.
> >
> > I reread Sections 4.1-4.2. Which parts are unclear? I am happy to=20
> > reword.
> >
> >>
> >> We could come up with a hybrid solution by the way.
> >>
> >> If the priority is to make sure that the packet gets to the=20
> >> destination, then:
> >> You set the destination-realm to the final destination and=20
> >> intermediaries that support decorated NAI use the decorated NAI=20
> >> without modification to the destination-realm. =20
> Intermediaries that=20
> >> don't know about decorated NAI will just perform the destination-=20
> >> realm routing.  As you point out you get looping but its=20
> not infinite=20
> >> looping.  At least the message would get to the final destination.
> >
> > The agent would send an error indicating a routing loop and=20
> then the=20
> > agent MAY try an alternate route.. which would result=20
> another routing=20
> > loop. I see no way out of this.
> >
> >>
> >>
> >> If NAI routing is the most important thing then you set the=20
> >> destination-realm to the next hop of the Decorated NAI.  Each hop=20
> >> that supports this scheme will use the decorated-nai and=20
> will update=20
> >> the realm.  If a hop is reached that does not understand decorated=20
> >> NAI then the packet will be consumed locally.
> >>
> >>
> >>
> >> Please see inline for more comments
> >>
> >>> -----Original Message-----
> >>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
> >>> Sent: March 3, 2009 5:44 PM
> >>> To: Avi Lior
> >>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;=20
> tena@huawei.com;=20
> >>> Hannes.Tschofenig@gmx.net; dime@ietf.org
> >>> Subject: Re: Dime NAI Routing
> >>>
> >>> Hi Avi,
> >>>
> >>> Thanks for reading & commenting the I-D.
> >>>
> >>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
> >>>
> >>>> A couple of comments:
> >>>>
> >>>> 1)  The draft should mention something about the presence of=20
> >>>> Destination-Host AVP.
> >>>>
> >>>> The rule for routing is that the Destination-Host AVP is
> >>> not looked at
> >>>> until the message reaches the terminal realm as=20
> determined by the=20
> >>>> decorated NAI.
> >>>
> >>> Where you would suggest to include the clarifying text?=20
> In Section=20
> >>> 4.2.?
> >>
> >> I don't know.  I will have to look at the draft. This is really a=20
> >> side issue and depends on the intent of the draft.
> >
> > Ok.
> >
> >>
> >>
> >>>
> >>>
> >>>> 2) I dont like the way Destination-Realm is being used.
> >>>>
> >>>> The draft states that the destination realm is updated on a
> >>> hop by hop
> >>>> basis together with the decorated NAI.
> >>>
> >>> I assume that is the only way to ensure the request=20
> message really=20
> >>> goes through all wanted realms.
> >>
> >> Correct.  And in some cases NAI routing is going to be=20
> more important=20
> >> and in some cases it will be more important to make sure=20
> the message=20
> >> makes it all the way.
> >>
> >>>
> >>>> If an intermediary is not compliant with the scheme
> >>> presented by this
> >>>> draft it will result in the intermediary consuming the
> >>> message locally
> >>>> - since the message contains the destination realm equal to
> >>>> its realm.   Thus the message is not going to reach the =20
> >>>> destination.
> >>>
> >>> That is the reason why the I-D suggests only using the decoration=20
> >>> stuff with a new application that is known to support=20
> this I-D. In=20
> >>> that way legacy agents can be bypassed.
> >>
> >> Okay so here you are clear this is Application based routing.
> >
> > This is suggested/recommended only when there is no=20
> guarantee that all=20
> > agents implement the NAI routing. To my understanding all Diameter=20
> > routing is based on applications + realms anyway, so I=20
> don't see the=20
> > problem.
> >
> >>
> >>>>
> >>>> Instead, I propose that the destination realm should be
> >>> always set to
> >>>> the terminal realm, thus:
> >>>>
> >>>> Agents that are compliant with the draft will first look at
> >>> the NAI to
> >>>> determine whether the packet has reached the terminal realm
> >>> or where
> >>>> it should be routed next;
> >>>
> >>> Are you proposing to make the routing decision based on the
> >>> User-Name (and ignore the Destination-Realm all together) in
> >>> cases where 1) the agent supports this I-D and 2) the
> >>> User-Name contains a decorated NAI?
> >>> Once the decorated NAI would have been "consumed" the
> >>> checking would be based on the Destination-Realm again..?
> >>
> >> Almost. In the case where you want to guarantee packet delivery =20
> >> irrespective of whether nodes are compliant with this draft, then =20
> >> you set the destination-realm to the final destination of the =20
> >> decorated NAI.  Agents that support your scheme would use the =20
> >> decorated NAI to determine how to route to the next hop.  Agents =20
> >> that don't support your scheme will use the destination-realm to =20
> >> determine how to route to the next hop (they will ignore the =20
> >> decorated NAI).
> >
> > Ok. That was close enough to my understanding ;) So, the route =20
> > decision would be:
> >
> > 1) case NAI routing supported:
> >   route decision: User-Name + Application
> >   if User-Name's @realm matches agent's own realm, precess the NAI
> >
> > 2) case normal RFC3588
> >   route decision: Destination-Realm + Application
> >   Modify: none
> >
> > right?
> >
> >
> >>
> >>
> >>>> Agents that are not compatible with the draft will use the
> >>> old rules
> >>>> for routing and would route the message according to the
> >>> destination-
> >>>> realm only and thus the message will reach the final destintaion
> >>>> albeit not necessarily according to the decorated NAI. But
> >>> at least it
> >>>> would work.
> >>>>
> >>>>
> >>>> Did I miss anything?
> >>>
> >>> What happens if.. the route happens to have some
> >>> non-compliant agents and when the request reaches its final
> >>> end (e.g. according to the inter-connection architecture) the
> >>> User-Name still has decorated NAI?
> >>> Would the decorated NAI compliant server/proxy send to
> >>> request back to some other realm pointed by the User-name?
> >>> This would effectively cause a routing loop, right?
> >> No. It may cause a loop but it wont be an infinite loop.  So it =20
> >> depends, in some cases I may be okay with have strange=20
> routing but =20
> >> I will at least get the packet there. So it depends what I=20
> want to =20
> >> achieve.
> >
> > There is no guarantee that the alternate route selected by=20
> the agent =20
> > that discovered the loop would result to any better outcome. The =20
> > alternate route could again route traffic back.
> >
> > Cheers,
> > 	Jouni
> >
> >>
> >>
> >>>
> >>> Cheers,
> >>>       Jouni
> >>>
> >>>
> >>>
> >>>>
> >>>>
> >>>
> >>>
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
>=20
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>=20

From avi@bridgewatersystems.com  Mon Mar 23 19:15:06 2009
Return-Path: <avi@bridgewatersystems.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 80BDA28C197 for <dime@core3.amsl.com>; Mon, 23 Mar 2009 19:15:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MPyVgvEcopJp for <dime@core3.amsl.com>; Mon, 23 Mar 2009 19:15:05 -0700 (PDT)
Received: from webmail.bridgewatersystems.com (webmail.bridgewatersystems.com [66.46.199.134]) by core3.amsl.com (Postfix) with ESMTP id AC93828C18A for <dime@ietf.org>; Mon, 23 Mar 2009 19:15:04 -0700 (PDT)
Received: from exchange02.bridgewatersys.com ([192.168.150.32]) by exchange02.bridgewatersys.com ([192.168.150.32]) with mapi; Mon, 23 Mar 2009 22:15:54 -0400
From: Avi Lior <avi@bridgewatersystems.com>
To: "lionel.morand@orange-ftgroup.com" <lionel.morand@orange-ftgroup.com>, "jouni.nospam@gmail.com" <jouni.nospam@gmail.com>
Date: Mon, 23 Mar 2009 22:12:28 -0400
Thread-Topic: [Dime] Dime NAI Routing
Thread-Index: AcmjAM0iM+dQ4vS9QRmQv5KJ0eVjJgJICTRwAAFCPpk=
Message-ID: <8A8CFE8F89C38B41A749C19328C76D6308D680CC36@exchange02.bridgewatersys.com>
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com><33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com><8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com><AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com> <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com>, <7DBAFEC6A76F3E42817DF1EBE64CB0260652F985@ftrdmel2>
In-Reply-To: <7DBAFEC6A76F3E42817DF1EBE64CB0260652F985@ftrdmel2>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: Mark Jones <Mark.Jones@bridgewatersystems.com>, "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Mar 2009 02:15:06 -0000

Okay by that logic then no routing loops will occur and thus the correct ap=
proach is to use decorated NAI and still setting the destination realm to t=
he final realm.

Since everyone will play by the same game, the intermediaries would use the=
 NAI to route and not the destination realm.

Why then do we have to modify the destination-realm on a hop by hop basis. =
 That makes no sense.

________________________________________
From: lionel.morand@orange-ftgroup.com [lionel.morand@orange-ftgroup.com]
Sent: Monday, March 23, 2009 10:00 PM
To: jouni.nospam@gmail.com; Avi Lior
Cc: Mark Jones; dime@ietf.org
Subject: RE: [Dime] Dime NAI Routing

Simple question:

All the decorated NAI handling described in the draft is based on the fact =
that there are "pre-existing" AAA roaming agreements between partners, esta=
blished long before the first access request for a given user.

Could we just assume that all the partners belonging to AAA roaming agreeme=
nts (and used by the UE to construct the Decorated NAI) MUST support the NA=
I Decoration?
If one of them doesn't support the NAI decoration, the handling of the requ=
est will fail but, in that case, this network should not be part of the roa=
ming agreements. That is, "MUST" is a must if you want to be part of the ga=
me.

What we are saying here is that something could be wrong if someone does ba=
d things. However, the basic principle of roaming agreements is that everyo=
ne plays the same game, with the rules, with the same part.

Lionel

> -----Message d'origine-----
> De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De
> la part de jouni korhonen
> Envoy=E9 : jeudi 12 mars 2009 11:53
> =C0 : Avi Lior
> Cc : Mark Jones; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> Objet : Re: [Dime] Dime NAI Routing
>
>
>
> I had some more thoughts around Avi's proposal and made a
> small summary and comparison of pros & cons. NAIdime means
> the solution proposed in the Dime draft. NAIavi is Avi's proposal.
>
> 1) All intermediates and peers support their own proposed
> solutions and
>     no new application
>     - Both NAIdime & NAIavi work fine
>
> 2) Some intermediates do not support NAI decoration, the
> destination Diameter server
>     supports NAI decoration and no new application
>     - NAIdime causes an "early" consumption of the request,
> which would
>       cause the auth/authz fail in all realistic situations
>     - NAIavi would cause a routing loop and auth/authz to
> fail in all realistic
>       situations. However, this applies only if there are
> more than one intermediate
>       realms and the non-supporting realm is not next to the
> final destination.
>
> 3) Some intermediates do not support NAI decoration, the
> destination Diameter server
>     does not support NAI decoration and no new application
>     - NAIdime has the same issue as in 2)
>     - NAIavi auth/authz probably fails as the User-Name does
> not correspond to the
>       user identity (it is still decorated). This depends on
> the used auth/authz
>       method though.
>
> 4) Some intermediates do not support NAI decoration, the
> destination Diameter server
>     supports NAI decoration, new application
>     - Both NAIdime & NAIavi work ok (non-supporting agents
> get bypassed)
>
> 5) Some intermediates do not support NAI decoration, the
> destination Diameter server
>     does not supports NAI decoration, new application
>     - not applicable
>
> 6) Routing "processing" in an agent that supports NAI routing
>     - NAIdime modifies both User-Name and Destination-realm. Final
>       routing decision still based on
> Destination-Realm+Application-id as
>       defined in unmodified rfc3588.
>     - NAIavi modifies only the User-Name. Final routing decision needs
>       modifications to rfc3588 request routing as sometimes
> the routing
>       is done based on the User-Name+Application-id and
> sometimes based
>       on the Destination-Realm+Application-id.
>
>
> DId I miss some scenario? Or did I get some scenario wrong?
>
> Summarizing the above:
>
> 1) is trivial and probably the desired deployment scenario.
> 4) NAI routing coupled with a new application is the safe choice. Both
>     NAIdime & NAIavi always work OK.
> 3) is a valid scenario where both NAIdime & NAIavi have issues. NAIavi
>     has probably less issues depending on the used auth/authz method.
> 2) here NAIavi has an advantage. From a protocol point of
> view it is not ok to
>     define a solution that is known to break in other than a
> naive deployment
>     scenario. From a practical point of view, I think the
> naive deployment
>     scenario is probably what gets deployed in real life. However, one
>     could never be sure.
> 6) NAIavi probably requires more code changes in the existing
> rfc3588 code base.
>     This could be a theoretical disadvantage though. I cannot
> really judge
>     the amount of work required in other's products.
>
> So.. comments? Honestly, I tried to be objective ;)
>
> Cheers,
>       Jouni
>
>
>
> On Mar 11, 2009, at 12:38 AM, jouni wrote:
>
> > Hi Avi,
> >
> > Thanks for the valuable input. See some comments inline.
> >
> > On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:
> >
> >> I have inline comments as well as new comment:
> >>
> >> The over arching problem as I see it is that when you read the
> >> document, at least the introduction and abstract you get the sense
> >> that the draft is intending to fix base diameter behavior.
> >
> > That is the intent.
> >
> >>
> >> But in responses I get, I get the feeling that the intent
> is really
> >> to have an Application based routing scheme using NAI.
> >>
> >
> > Applications are recommended for cases where the requests
> pass through
> > realms/networks where one cannot always claim that "all my agents
> > implement RFC3588 + RFC-NAI-Routing". If you know that your
> networks
> > support RFC3588 + RFC-NAI-Routing, there is no need to go for a new
> > application. Section 4.3 is a recommendation for backwards
> > compatibility.
> >
> >
> >>
> >> If you are trying to fix base then we need a robust backwards
> >> compatible way of doing things.  As well, we can argue
> whether or not
> >> it should be placed in DIME.  There is more work to do.
> >
> > We at least seem to agree that something needs to be done ;)
> >
> >>
> >> If you are trying to write a document that describes how
> one would do
> >> Application routing using NAI. Then that does not belong
> in base so
> >> we should stop debating that.  And actually in this case
> what you are
> >> doing is fine and you are probably there.
> >>
> >> So which is it?  And once we pick we should be clear in the text.
> >
> > Definitely this is not about doing only application routing
> using NAI.
> > One of the goals is to be able to request a vendor e.g. "give me an
> > agent that implements RFC3588/RFC-NAI-Routing", without being more
> > specific on applications.
> >
> > I reread Sections 4.1-4.2. Which parts are unclear? I am happy to
> > reword.
> >
> >>
> >> We could come up with a hybrid solution by the way.
> >>
> >> If the priority is to make sure that the packet gets to the
> >> destination, then:
> >> You set the destination-realm to the final destination and
> >> intermediaries that support decorated NAI use the decorated NAI
> >> without modification to the destination-realm.
> Intermediaries that
> >> don't know about decorated NAI will just perform the destination-
> >> realm routing.  As you point out you get looping but its
> not infinite
> >> looping.  At least the message would get to the final destination.
> >
> > The agent would send an error indicating a routing loop and
> then the
> > agent MAY try an alternate route.. which would result
> another routing
> > loop. I see no way out of this.
> >
> >>
> >>
> >> If NAI routing is the most important thing then you set the
> >> destination-realm to the next hop of the Decorated NAI.  Each hop
> >> that supports this scheme will use the decorated-nai and
> will update
> >> the realm.  If a hop is reached that does not understand decorated
> >> NAI then the packet will be consumed locally.
> >>
> >>
> >>
> >> Please see inline for more comments
> >>
> >>> -----Original Message-----
> >>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
> >>> Sent: March 3, 2009 5:44 PM
> >>> To: Avi Lior
> >>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;
> tena@huawei.com;
> >>> Hannes.Tschofenig@gmx.net; dime@ietf.org
> >>> Subject: Re: Dime NAI Routing
> >>>
> >>> Hi Avi,
> >>>
> >>> Thanks for reading & commenting the I-D.
> >>>
> >>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
> >>>
> >>>> A couple of comments:
> >>>>
> >>>> 1)  The draft should mention something about the presence of
> >>>> Destination-Host AVP.
> >>>>
> >>>> The rule for routing is that the Destination-Host AVP is
> >>> not looked at
> >>>> until the message reaches the terminal realm as
> determined by the
> >>>> decorated NAI.
> >>>
> >>> Where you would suggest to include the clarifying text?
> In Section
> >>> 4.2.?
> >>
> >> I don't know.  I will have to look at the draft. This is really a
> >> side issue and depends on the intent of the draft.
> >
> > Ok.
> >
> >>
> >>
> >>>
> >>>
> >>>> 2) I dont like the way Destination-Realm is being used.
> >>>>
> >>>> The draft states that the destination realm is updated on a
> >>> hop by hop
> >>>> basis together with the decorated NAI.
> >>>
> >>> I assume that is the only way to ensure the request
> message really
> >>> goes through all wanted realms.
> >>
> >> Correct.  And in some cases NAI routing is going to be
> more important
> >> and in some cases it will be more important to make sure
> the message
> >> makes it all the way.
> >>
> >>>
> >>>> If an intermediary is not compliant with the scheme
> >>> presented by this
> >>>> draft it will result in the intermediary consuming the
> >>> message locally
> >>>> - since the message contains the destination realm equal to
> >>>> its realm.   Thus the message is not going to reach the
> >>>> destination.
> >>>
> >>> That is the reason why the I-D suggests only using the decoration
> >>> stuff with a new application that is known to support
> this I-D. In
> >>> that way legacy agents can be bypassed.
> >>
> >> Okay so here you are clear this is Application based routing.
> >
> > This is suggested/recommended only when there is no
> guarantee that all
> > agents implement the NAI routing. To my understanding all Diameter
> > routing is based on applications + realms anyway, so I
> don't see the
> > problem.
> >
> >>
> >>>>
> >>>> Instead, I propose that the destination realm should be
> >>> always set to
> >>>> the terminal realm, thus:
> >>>>
> >>>> Agents that are compliant with the draft will first look at
> >>> the NAI to
> >>>> determine whether the packet has reached the terminal realm
> >>> or where
> >>>> it should be routed next;
> >>>
> >>> Are you proposing to make the routing decision based on the
> >>> User-Name (and ignore the Destination-Realm all together) in
> >>> cases where 1) the agent supports this I-D and 2) the
> >>> User-Name contains a decorated NAI?
> >>> Once the decorated NAI would have been "consumed" the
> >>> checking would be based on the Destination-Realm again..?
> >>
> >> Almost. In the case where you want to guarantee packet delivery
> >> irrespective of whether nodes are compliant with this draft, then
> >> you set the destination-realm to the final destination of the
> >> decorated NAI.  Agents that support your scheme would use the
> >> decorated NAI to determine how to route to the next hop.  Agents
> >> that don't support your scheme will use the destination-realm to
> >> determine how to route to the next hop (they will ignore the
> >> decorated NAI).
> >
> > Ok. That was close enough to my understanding ;) So, the route
> > decision would be:
> >
> > 1) case NAI routing supported:
> >   route decision: User-Name + Application
> >   if User-Name's @realm matches agent's own realm, precess the NAI
> >
> > 2) case normal RFC3588
> >   route decision: Destination-Realm + Application
> >   Modify: none
> >
> > right?
> >
> >
> >>
> >>
> >>>> Agents that are not compatible with the draft will use the
> >>> old rules
> >>>> for routing and would route the message according to the
> >>> destination-
> >>>> realm only and thus the message will reach the final destintaion
> >>>> albeit not necessarily according to the decorated NAI. But
> >>> at least it
> >>>> would work.
> >>>>
> >>>>
> >>>> Did I miss anything?
> >>>
> >>> What happens if.. the route happens to have some
> >>> non-compliant agents and when the request reaches its final
> >>> end (e.g. according to the inter-connection architecture) the
> >>> User-Name still has decorated NAI?
> >>> Would the decorated NAI compliant server/proxy send to
> >>> request back to some other realm pointed by the User-name?
> >>> This would effectively cause a routing loop, right?
> >> No. It may cause a loop but it wont be an infinite loop.  So it
> >> depends, in some cases I may be okay with have strange
> routing but
> >> I will at least get the packet there. So it depends what I
> want to
> >> achieve.
> >
> > There is no guarantee that the alternate route selected by
> the agent
> > that discovered the loop would result to any better outcome. The
> > alternate route could again route traffic back.
> >
> > Cheers,
> >     Jouni
> >
> >>
> >>
> >>>
> >>> Cheers,
> >>>       Jouni
> >>>
> >>>
> >>>
> >>>>
> >>>>
> >>>
> >>>
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
>
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>=

From tena@huawei.com  Thu Mar 26 23:33:15 2009
Return-Path: <tena@huawei.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5B8263A6825 for <dime@core3.amsl.com>; Thu, 26 Mar 2009 23:33:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5h9uR3T8caQ5 for <dime@core3.amsl.com>; Thu, 26 Mar 2009 23:33:14 -0700 (PDT)
Received: from szxga01-in.huawei.com (szxga01-in.huawei.com [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 328C83A68F9 for <dime@ietf.org>; Thu, 26 Mar 2009 23:32:43 -0700 (PDT)
Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KH500FAAJJZB7@szxga01-in.huawei.com> for dime@ietf.org; Fri, 27 Mar 2009 14:33:35 +0800 (CST)
Received: from huawei.com ([172.24.1.6]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KH5002GZJJZ04@szxga01-in.huawei.com> for dime@ietf.org; Fri, 27 Mar 2009 14:33:35 +0800 (CST)
Received: from [192.168.1.2] (250.74.35.121.broad.sz.gd.dynamic.163data.com.cn [121.35.74.250]) by szxml02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug  8 2006)) with ESMTPA id <0KH5007JYJJXB4@szxml02-in.huawei.com> for dime@ietf.org; Fri, 27 Mar 2009 14:33:35 +0800 (CST)
Date: Fri, 27 Mar 2009 14:33:33 +0800
From: Tina TSOU <tena@huawei.com>
To: dime@ietf.org
Message-id: <2D8C6F75-FE07-4095-A297-027160FD91EB@huawei.com>
MIME-version: 1.0
X-Mailer: Apple Mail (2.930.3)
Content-type: multipart/alternative; boundary="Boundary_(ID_dX2MQIjp/Sa6eHsAaKTivw)"
Subject: [Dime] Discussion of Redirect Indication based on realm
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Mar 2009 06:33:15 -0000

--Boundary_(ID_dX2MQIjp/Sa6eHsAaKTivw)
Content-type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-transfer-encoding: 7BIT

> It is described here.
> http://groups.google.com/group/diameter-routing/browse_thread/thread/899e7568e09634b0?hl=en
>
> I copy the text as below.
> 3.  Use Cases
> ...
> 3.2.  Redirect Indication based on realm
>
>    Consider an Operator; say Operator_A offering some service to
>    Diameter client in its Realm; say Realm_A. For business/maintenance
>    reasons, the operator wants to discontinue the service.  However  
> the
>    operator has asked another Operator; say Operator_B (serving  
> Realm_B)
>    to provide the service to the clients.  In this case, all the  
> clients
>    should be configured to contact Realm_B instead of Realm_A for the
>    service.
>
>    For smooth transition, agents may be employed in Realm_A which  
> could
>    answer with a redirect indication suggesting that the service
>    requests may be sent to another realm; Realm_B in this case, so  
> as to
>    be served
> ...
> 4.  Problem Statements
> ...
> 4.3.  Redirect Indication based on realm
>
>    This is the statement of the problem posed by the case presented in
>    Section 3.2.
>
>    1.  Existing Diameter message routing behaviour: Redirect  
> indication
>        is provided at host level.  It provides a list of servers that
>        may be contacted for the request to be served.
>
>    2.  Undesirable behaviour in the existing method: Redirect  
> indication
>        is not provided at the realm level.  There is no option to
>        provide a (list of) realm(s) that may be contacted for the
>        request to be served.
>
>    3.  Desired behaviour: Redirect indication could be provided at the
>        realm level also.  The indication may specify a (list of)
>        realm(s) which could be contacted for the request to be served.
B. R.
Tina
http://tinatsou.weebly.com/contact.html






--Boundary_(ID_dX2MQIjp/Sa6eHsAaKTivw)
Content-type: text/html; charset=US-ASCII
Content-transfer-encoding: 7BIT

<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><blockquote type="cite">It is described here.<div><div><a href="http://groups.google.com/group/diameter-routing/browse_thread/thread/899e7568e09634b0?hl=en">http://groups.google.com/group/diameter-routing/browse_thread/thread/899e7568e09634b0?hl=en</a></div><div><br></div><div>I copy the text as below.</div><div><span class="Apple-style-span" style="font-family: Times; font-size: 16px; "><pre style="word-wrap: break-word; white-space: pre-wrap; ">3.  Use Cases</pre><pre style="word-wrap: break-word; white-space: pre-wrap; ">...</pre></span></div><div><span class="Apple-style-span" style="font-family: Times; font-size: 16px; "><pre style="word-wrap: break-word; white-space: pre-wrap; ">3.2.  Redirect Indication based on realm

   Consider an Operator; say Operator_A offering some service to
   Diameter client in its Realm; say Realm_A. For business/maintenance
   reasons, the operator wants to discontinue the service.  However the
   operator has asked another Operator; say Operator_B (serving Realm_B)
   to provide the service to the clients.  In this case, all the clients
   should be configured to contact Realm_B instead of Realm_A for the
   service.

   For smooth transition, agents may be employed in Realm_A which could
   answer with a redirect indication suggesting that the service
   requests may be sent to another realm; Realm_B in this case, so as to
   be served</pre><pre style="word-wrap: break-word; white-space: pre-wrap; ">...</pre><pre style="word-wrap: break-word; white-space: pre-wrap; "><span class="Apple-style-span" style="font-family: Times; white-space: normal; "><pre style="word-wrap: break-word; white-space: pre-wrap; ">4.  Problem Statements</pre><pre style="word-wrap: break-word; white-space: pre-wrap; ">...</pre><pre style="word-wrap: break-word; white-space: pre-wrap; "><span class="Apple-style-span" style="font-family: Times; white-space: normal; "><pre style="word-wrap: break-word; white-space: pre-wrap; ">4.3.  Redirect Indication based on realm

   This is the statement of the problem posed by the case presented in
   Section 3.2.

   1.  Existing Diameter message routing behaviour: Redirect indication
       is provided at host level.  It provides a list of servers that
       may be contacted for the request to be served.

   2.  Undesirable behaviour in the existing method: Redirect indication
       is not provided at the realm level.  There is no option to
       provide a (list of) realm(s) that may be contacted for the
       request to be served.

   3.  Desired behaviour: Redirect indication could be provided at the
       realm level also.  The indication may specify a (list of)
       realm(s) which could be contacted for the request to be served.</pre></span></pre></span></pre></span></div></div></blockquote><div apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight
 : normal
 line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode:
  space; 
-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-bo
 rder-hor
bkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size
 : 12px; 
variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width:
  0px; ">
eak-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; 
 white-sp
ord-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: sep
 arate; c
family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: non
 e; -webk
; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height:
  normal;
 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;
  "><div>
</div><div><p align=""><a href="http://tinatsou.weebly.com/contact.html">http://tinatsou.weebly.com/contact.html</a><br></p><p align=""><br></p></div></div></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span></div></span><br class="Apple-interchange-newline"> </div><br></body></html>

--Boundary_(ID_dX2MQIjp/Sa6eHsAaKTivw)--

From nrs2712@gmail.com  Sun Mar 29 08:22:04 2009
Return-Path: <nrs2712@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6AA643A67F7 for <dime@core3.amsl.com>; Sun, 29 Mar 2009 08:22:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.555
X-Spam-Level: 
X-Spam-Status: No, score=-2.555 tagged_above=-999 required=5 tests=[AWL=0.043,  BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BcoFFKeFJ4Ua for <dime@core3.amsl.com>; Sun, 29 Mar 2009 08:22:01 -0700 (PDT)
Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.236]) by core3.amsl.com (Postfix) with ESMTP id AB4A63A659B for <dime@ietf.org>; Sun, 29 Mar 2009 08:22:01 -0700 (PDT)
Received: by rv-out-0506.google.com with SMTP id g37so714210rvb.5 for <dime@ietf.org>; Sun, 29 Mar 2009 08:22:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=ugfmIkWOUFZX+pMbh9zB0ztbHxdB0+qka/h8ZIsaot0=; b=MgJ7I5Y5z5Y9T1uI7Ogg06IpEBFifNGKn3UCsVCN+GlKob0KEcF3CP+B5Y8CYCOAh1 uAJ1u2OAZTTcxd45tIzuKOdUFz4c9U6MK1JFxvvSU4ocL8KgIW4GzKl0+pcmZtszFBPo Aen9q/OhSJvW9jPEVgYIJ+mLDl20Hrn6qtS0A=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=jjJnCF/6k6+Tfzq/lFurgnZHf07TjdrENoPP3UXKk8fUlc9kJma3DuWdZQY/KjcX0M rylrFXiMzb/k71BNOhdeTf3Vc9YhI8tc9ayvXkNXnNnGS89lX+Sc9DqEb+mjHALKg0h6 ogfIQ2gFpdZG1i8KqJCUZCpnAUbw30dWIsIAU=
MIME-Version: 1.0
Received: by 10.141.26.19 with SMTP id d19mr2261212rvj.137.1238340178527; Sun,  29 Mar 2009 08:22:58 -0700 (PDT)
In-Reply-To: <8A8CFE8F89C38B41A749C19328C76D6308D680CC36@exchange02.bridgewatersys.com>
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com> <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com> <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com> <AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com> <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com> <7DBAFEC6A76F3E42817DF1EBE64CB0260652F985@ftrdmel2> <8A8CFE8F89C38B41A749C19328C76D6308D680CC36@exchange02.bridgewatersys.com>
Date: Sun, 29 Mar 2009 20:52:58 +0530
Message-ID: <1bdcf2860903290822g354da609r33773502c11b5f49@mail.gmail.com>
From: Ravi <nrs2712@gmail.com>
To: Avi Lior <avi@bridgewatersystems.com>
Content-Type: multipart/alternative; boundary=000e0cd14dee73c7c50466438a90
Cc: "dime@ietf.org" <dime@ietf.org>, Mark Jones <Mark.Jones@bridgewatersystems.com>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Mar 2009 15:22:04 -0000

--000e0cd14dee73c7c50466438a90
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

These are my views after going through the NAI draft
1) As pointed out by Avi Lior -  Modifying the destination-realm on a hop b=
y
hop basis is not required. IMO, the destination-realm AVP should reflect th=
e
actual destination(and not the intermediate destination), the request is
supposed to be routed to.

2) IMO, in its current form the draft is suggesting only one mechanism to
achieve "force routing of messages to the home realm through a predefined
list of realms". However, there are other methods of achieving the same
purpose like using another AVP called Realm-Path AVP which is added by the
client before sending the request. If we use a separate AVP for this purpos=
e
then there would be a clear differentiation between Routing AVPs and
non-Routing AVPs.
       In the draft, the user-name AVP is used as a routing AVP by all the
proxies in the path of the request whereas the server uses it as a
non-Routing AVP (for authorization)

Ravi

On Tue, Mar 24, 2009 at 7:42 AM, Avi Lior <avi@bridgewatersystems.com>wrote=
:

> Okay by that logic then no routing loops will occur and thus the correct
> approach is to use decorated NAI and still setting the destination realm =
to
> the final realm.
>
> Since everyone will play by the same game, the intermediaries would use t=
he
> NAI to route and not the destination realm.
>
> Why then do we have to modify the destination-realm on a hop by hop basis=
.
>  That makes no sense.
>
> ________________________________________
> From: lionel.morand@orange-ftgroup.com [lionel.morand@orange-ftgroup.com]
> Sent: Monday, March 23, 2009 10:00 PM
> To: jouni.nospam@gmail.com; Avi Lior
> Cc: Mark Jones; dime@ietf.org
> Subject: RE: [Dime] Dime NAI Routing
>
> Simple question:
>
> All the decorated NAI handling described in the draft is based on the fac=
t
> that there are "pre-existing" AAA roaming agreements between partners,
> established long before the first access request for a given user.
>
> Could we just assume that all the partners belonging to AAA roaming
> agreements (and used by the UE to construct the Decorated NAI) MUST suppo=
rt
> the NAI Decoration?
> If one of them doesn't support the NAI decoration, the handling of the
> request will fail but, in that case, this network should not be part of t=
he
> roaming agreements. That is, "MUST" is a must if you want to be part of t=
he
> game.
>
> What we are saying here is that something could be wrong if someone does
> bad things. However, the basic principle of roaming agreements is that
> everyone plays the same game, with the rules, with the same part.
>
> Lionel
>
> > -----Message d'origine-----
> > De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De
> > la part de jouni korhonen
> > Envoy=E9 : jeudi 12 mars 2009 11:53
> > =C0 : Avi Lior
> > Cc : Mark Jones; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> > Objet : Re: [Dime] Dime NAI Routing
> >
> >
> >
> > I had some more thoughts around Avi's proposal and made a
> > small summary and comparison of pros & cons. NAIdime means
> > the solution proposed in the Dime draft. NAIavi is Avi's proposal.
> >
> > 1) All intermediates and peers support their own proposed
> > solutions and
> >     no new application
> >     - Both NAIdime & NAIavi work fine
> >
> > 2) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     supports NAI decoration and no new application
> >     - NAIdime causes an "early" consumption of the request,
> > which would
> >       cause the auth/authz fail in all realistic situations
> >     - NAIavi would cause a routing loop and auth/authz to
> > fail in all realistic
> >       situations. However, this applies only if there are
> > more than one intermediate
> >       realms and the non-supporting realm is not next to the
> > final destination.
> >
> > 3) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     does not support NAI decoration and no new application
> >     - NAIdime has the same issue as in 2)
> >     - NAIavi auth/authz probably fails as the User-Name does
> > not correspond to the
> >       user identity (it is still decorated). This depends on
> > the used auth/authz
> >       method though.
> >
> > 4) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     supports NAI decoration, new application
> >     - Both NAIdime & NAIavi work ok (non-supporting agents
> > get bypassed)
> >
> > 5) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     does not supports NAI decoration, new application
> >     - not applicable
> >
> > 6) Routing "processing" in an agent that supports NAI routing
> >     - NAIdime modifies both User-Name and Destination-realm. Final
> >       routing decision still based on
> > Destination-Realm+Application-id as
> >       defined in unmodified rfc3588.
> >     - NAIavi modifies only the User-Name. Final routing decision needs
> >       modifications to rfc3588 request routing as sometimes
> > the routing
> >       is done based on the User-Name+Application-id and
> > sometimes based
> >       on the Destination-Realm+Application-id.
> >
> >
> > DId I miss some scenario? Or did I get some scenario wrong?
> >
> > Summarizing the above:
> >
> > 1) is trivial and probably the desired deployment scenario.
> > 4) NAI routing coupled with a new application is the safe choice. Both
> >     NAIdime & NAIavi always work OK.
> > 3) is a valid scenario where both NAIdime & NAIavi have issues. NAIavi
> >     has probably less issues depending on the used auth/authz method.
> > 2) here NAIavi has an advantage. From a protocol point of
> > view it is not ok to
> >     define a solution that is known to break in other than a
> > naive deployment
> >     scenario. From a practical point of view, I think the
> > naive deployment
> >     scenario is probably what gets deployed in real life. However, one
> >     could never be sure.
> > 6) NAIavi probably requires more code changes in the existing
> > rfc3588 code base.
> >     This could be a theoretical disadvantage though. I cannot
> > really judge
> >     the amount of work required in other's products.
> >
> > So.. comments? Honestly, I tried to be objective ;)
> >
> > Cheers,
> >       Jouni
> >
> >
> >
> > On Mar 11, 2009, at 12:38 AM, jouni wrote:
> >
> > > Hi Avi,
> > >
> > > Thanks for the valuable input. See some comments inline.
> > >
> > > On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:
> > >
> > >> I have inline comments as well as new comment:
> > >>
> > >> The over arching problem as I see it is that when you read the
> > >> document, at least the introduction and abstract you get the sense
> > >> that the draft is intending to fix base diameter behavior.
> > >
> > > That is the intent.
> > >
> > >>
> > >> But in responses I get, I get the feeling that the intent
> > is really
> > >> to have an Application based routing scheme using NAI.
> > >>
> > >
> > > Applications are recommended for cases where the requests
> > pass through
> > > realms/networks where one cannot always claim that "all my agents
> > > implement RFC3588 + RFC-NAI-Routing". If you know that your
> > networks
> > > support RFC3588 + RFC-NAI-Routing, there is no need to go for a new
> > > application. Section 4.3 is a recommendation for backwards
> > > compatibility.
> > >
> > >
> > >>
> > >> If you are trying to fix base then we need a robust backwards
> > >> compatible way of doing things.  As well, we can argue
> > whether or not
> > >> it should be placed in DIME.  There is more work to do.
> > >
> > > We at least seem to agree that something needs to be done ;)
> > >
> > >>
> > >> If you are trying to write a document that describes how
> > one would do
> > >> Application routing using NAI. Then that does not belong
> > in base so
> > >> we should stop debating that.  And actually in this case
> > what you are
> > >> doing is fine and you are probably there.
> > >>
> > >> So which is it?  And once we pick we should be clear in the text.
> > >
> > > Definitely this is not about doing only application routing
> > using NAI.
> > > One of the goals is to be able to request a vendor e.g. "give me an
> > > agent that implements RFC3588/RFC-NAI-Routing", without being more
> > > specific on applications.
> > >
> > > I reread Sections 4.1-4.2. Which parts are unclear? I am happy to
> > > reword.
> > >
> > >>
> > >> We could come up with a hybrid solution by the way.
> > >>
> > >> If the priority is to make sure that the packet gets to the
> > >> destination, then:
> > >> You set the destination-realm to the final destination and
> > >> intermediaries that support decorated NAI use the decorated NAI
> > >> without modification to the destination-realm.
> > Intermediaries that
> > >> don't know about decorated NAI will just perform the destination-
> > >> realm routing.  As you point out you get looping but its
> > not infinite
> > >> looping.  At least the message would get to the final destination.
> > >
> > > The agent would send an error indicating a routing loop and
> > then the
> > > agent MAY try an alternate route.. which would result
> > another routing
> > > loop. I see no way out of this.
> > >
> > >>
> > >>
> > >> If NAI routing is the most important thing then you set the
> > >> destination-realm to the next hop of the Decorated NAI.  Each hop
> > >> that supports this scheme will use the decorated-nai and
> > will update
> > >> the realm.  If a hop is reached that does not understand decorated
> > >> NAI then the packet will be consumed locally.
> > >>
> > >>
> > >>
> > >> Please see inline for more comments
> > >>
> > >>> -----Original Message-----
> > >>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
> > >>> Sent: March 3, 2009 5:44 PM
> > >>> To: Avi Lior
> > >>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;
> > tena@huawei.com;
> > >>> Hannes.Tschofenig@gmx.net; dime@ietf.org
> > >>> Subject: Re: Dime NAI Routing
> > >>>
> > >>> Hi Avi,
> > >>>
> > >>> Thanks for reading & commenting the I-D.
> > >>>
> > >>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
> > >>>
> > >>>> A couple of comments:
> > >>>>
> > >>>> 1)  The draft should mention something about the presence of
> > >>>> Destination-Host AVP.
> > >>>>
> > >>>> The rule for routing is that the Destination-Host AVP is
> > >>> not looked at
> > >>>> until the message reaches the terminal realm as
> > determined by the
> > >>>> decorated NAI.
> > >>>
> > >>> Where you would suggest to include the clarifying text?
> > In Section
> > >>> 4.2.?
> > >>
> > >> I don't know.  I will have to look at the draft. This is really a
> > >> side issue and depends on the intent of the draft.
> > >
> > > Ok.
> > >
> > >>
> > >>
> > >>>
> > >>>
> > >>>> 2) I dont like the way Destination-Realm is being used.
> > >>>>
> > >>>> The draft states that the destination realm is updated on a
> > >>> hop by hop
> > >>>> basis together with the decorated NAI.
> > >>>
> > >>> I assume that is the only way to ensure the request
> > message really
> > >>> goes through all wanted realms.
> > >>
> > >> Correct.  And in some cases NAI routing is going to be
> > more important
> > >> and in some cases it will be more important to make sure
> > the message
> > >> makes it all the way.
> > >>
> > >>>
> > >>>> If an intermediary is not compliant with the scheme
> > >>> presented by this
> > >>>> draft it will result in the intermediary consuming the
> > >>> message locally
> > >>>> - since the message contains the destination realm equal to
> > >>>> its realm.   Thus the message is not going to reach the
> > >>>> destination.
> > >>>
> > >>> That is the reason why the I-D suggests only using the decoration
> > >>> stuff with a new application that is known to support
> > this I-D. In
> > >>> that way legacy agents can be bypassed.
> > >>
> > >> Okay so here you are clear this is Application based routing.
> > >
> > > This is suggested/recommended only when there is no
> > guarantee that all
> > > agents implement the NAI routing. To my understanding all Diameter
> > > routing is based on applications + realms anyway, so I
> > don't see the
> > > problem.
> > >
> > >>
> > >>>>
> > >>>> Instead, I propose that the destination realm should be
> > >>> always set to
> > >>>> the terminal realm, thus:
> > >>>>
> > >>>> Agents that are compliant with the draft will first look at
> > >>> the NAI to
> > >>>> determine whether the packet has reached the terminal realm
> > >>> or where
> > >>>> it should be routed next;
> > >>>
> > >>> Are you proposing to make the routing decision based on the
> > >>> User-Name (and ignore the Destination-Realm all together) in
> > >>> cases where 1) the agent supports this I-D and 2) the
> > >>> User-Name contains a decorated NAI?
> > >>> Once the decorated NAI would have been "consumed" the
> > >>> checking would be based on the Destination-Realm again..?
> > >>
> > >> Almost. In the case where you want to guarantee packet delivery
> > >> irrespective of whether nodes are compliant with this draft, then
> > >> you set the destination-realm to the final destination of the
> > >> decorated NAI.  Agents that support your scheme would use the
> > >> decorated NAI to determine how to route to the next hop.  Agents
> > >> that don't support your scheme will use the destination-realm to
> > >> determine how to route to the next hop (they will ignore the
> > >> decorated NAI).
> > >
> > > Ok. That was close enough to my understanding ;) So, the route
> > > decision would be:
> > >
> > > 1) case NAI routing supported:
> > >   route decision: User-Name + Application
> > >   if User-Name's @realm matches agent's own realm, precess the NAI
> > >
> > > 2) case normal RFC3588
> > >   route decision: Destination-Realm + Application
> > >   Modify: none
> > >
> > > right?
> > >
> > >
> > >>
> > >>
> > >>>> Agents that are not compatible with the draft will use the
> > >>> old rules
> > >>>> for routing and would route the message according to the
> > >>> destination-
> > >>>> realm only and thus the message will reach the final destintaion
> > >>>> albeit not necessarily according to the decorated NAI. But
> > >>> at least it
> > >>>> would work.
> > >>>>
> > >>>>
> > >>>> Did I miss anything?
> > >>>
> > >>> What happens if.. the route happens to have some
> > >>> non-compliant agents and when the request reaches its final
> > >>> end (e.g. according to the inter-connection architecture) the
> > >>> User-Name still has decorated NAI?
> > >>> Would the decorated NAI compliant server/proxy send to
> > >>> request back to some other realm pointed by the User-name?
> > >>> This would effectively cause a routing loop, right?
> > >> No. It may cause a loop but it wont be an infinite loop.  So it
> > >> depends, in some cases I may be okay with have strange
> > routing but
> > >> I will at least get the packet there. So it depends what I
> > want to
> > >> achieve.
> > >
> > > There is no guarantee that the alternate route selected by
> > the agent
> > > that discovered the loop would result to any better outcome. The
> > > alternate route could again route traffic back.
> > >
> > > Cheers,
> > >     Jouni
> > >
> > >>
> > >>
> > >>>
> > >>> Cheers,
> > >>>       Jouni
> > >>>
> > >>>
> > >>>
> > >>>>
> > >>>>
> > >>>
> > >>>
> > >
> > > _______________________________________________
> > > DiME mailing list
> > > DiME@ietf.org
> > > https://www.ietf.org/mailman/listinfo/dime
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> >
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>

--000e0cd14dee73c7c50466438a90
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

These are my views after going through the NAI draft<div><br></div><div>1) =
As pointed out by Avi Lior - =A0Modifying the destination-realm on a hop by=
 hop basis is not required. IMO, the destination-realm AVP should reflect t=
he actual destination(and not the intermediate destination), the request is=
 supposed to be routed to.</div>
<div><br></div><div>2) IMO, in its current form the draft is suggesting onl=
y one mechanism to achieve &quot;<span class=3D"Apple-style-span" style=3D"=
font-family: -webkit-monospace; font-size: 16px; white-space: pre-wrap; ">f=
orce routing of messages to the home<span class=3D"Apple-style-span" style=
=3D"font-family: arial; font-size: 13px; white-space: normal; "><span class=
=3D"Apple-style-span" style=3D"font-family: -webkit-monospace; font-size: 1=
6px; white-space: pre-wrap; "> realm through a predefined list of realms</s=
pan>&quot;. However, there are other methods of achieving the same purpose =
like using another AVP called Realm-Path AVP which is added by the client b=
efore sending the request. If we use a separate AVP for this purpose then t=
here would be a clear differentiation between Routing AVPs and non-Routing =
AVPs.</span></span></div>
<div>=A0=A0 =A0 =A0 In the draft, the user-name AVP is used as a routing AV=
P by all the proxies in the path of the request whereas the server uses it =
as a non-Routing AVP (for authorization)</div><div><br></div><div>Ravi</div=
><div>
<br><div class=3D"gmail_quote">On Tue, Mar 24, 2009 at 7:42 AM, Avi Lior <s=
pan dir=3D"ltr">&lt;<a href=3D"mailto:avi@bridgewatersystems.com">avi@bridg=
ewatersystems.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote=
" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Okay by that logic then no routing loops will occur and thus the correct ap=
proach is to use decorated NAI and still setting the destination realm to t=
he final realm.<br>
<br>
Since everyone will play by the same game, the intermediaries would use the=
 NAI to route and not the destination realm.<br>
<br>
Why then do we have to modify the destination-realm on a hop by hop basis. =
=A0That makes no sense.<br>
<br>
________________________________________<br>
From: <a href=3D"mailto:lionel.morand@orange-ftgroup.com">lionel.morand@ora=
nge-ftgroup.com</a> [<a href=3D"mailto:lionel.morand@orange-ftgroup.com">li=
onel.morand@orange-ftgroup.com</a>]<br>
Sent: Monday, March 23, 2009 10:00 PM<br>
To: <a href=3D"mailto:jouni.nospam@gmail.com">jouni.nospam@gmail.com</a>; A=
vi Lior<br>
Cc: Mark Jones; <a href=3D"mailto:dime@ietf.org">dime@ietf.org</a><br>
Subject: RE: [Dime] Dime NAI Routing<br>
<div><div></div><div class=3D"h5"><br>
Simple question:<br>
<br>
All the decorated NAI handling described in the draft is based on the fact =
that there are &quot;pre-existing&quot; AAA roaming agreements between part=
ners, established long before the first access request for a given user.<br=
>

<br>
Could we just assume that all the partners belonging to AAA roaming agreeme=
nts (and used by the UE to construct the Decorated NAI) MUST support the NA=
I Decoration?<br>
If one of them doesn&#39;t support the NAI decoration, the handling of the =
request will fail but, in that case, this network should not be part of the=
 roaming agreements. That is, &quot;MUST&quot; is a must if you want to be =
part of the game.<br>

<br>
What we are saying here is that something could be wrong if someone does ba=
d things. However, the basic principle of roaming agreements is that everyo=
ne plays the same game, with the rules, with the same part.<br>
<br>
Lionel<br>
<br>
&gt; -----Message d&#39;origine-----<br>
&gt; De : <a href=3D"mailto:dime-bounces@ietf.org">dime-bounces@ietf.org</a=
> [mailto:<a href=3D"mailto:dime-bounces@ietf.org">dime-bounces@ietf.org</a=
>] De<br>
&gt; la part de jouni korhonen<br>
&gt; Envoy=E9 : jeudi 12 mars 2009 11:53<br>
&gt; =C0 : Avi Lior<br>
&gt; Cc : Mark Jones; MORAND Lionel RD-CORE-ISS; <a href=3D"mailto:dime@iet=
f.org">dime@ietf.org</a><br>
&gt; Objet : Re: [Dime] Dime NAI Routing<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; I had some more thoughts around Avi&#39;s proposal and made a<br>
&gt; small summary and comparison of pros &amp; cons. NAIdime means<br>
&gt; the solution proposed in the Dime draft. NAIavi is Avi&#39;s proposal.=
<br>
&gt;<br>
&gt; 1) All intermediates and peers support their own proposed<br>
&gt; solutions and<br>
&gt; =A0 =A0 no new application<br>
&gt; =A0 =A0 - Both NAIdime &amp; NAIavi work fine<br>
&gt;<br>
&gt; 2) Some intermediates do not support NAI decoration, the<br>
&gt; destination Diameter server<br>
&gt; =A0 =A0 supports NAI decoration and no new application<br>
&gt; =A0 =A0 - NAIdime causes an &quot;early&quot; consumption of the reque=
st,<br>
&gt; which would<br>
&gt; =A0 =A0 =A0 cause the auth/authz fail in all realistic situations<br>
&gt; =A0 =A0 - NAIavi would cause a routing loop and auth/authz to<br>
&gt; fail in all realistic<br>
&gt; =A0 =A0 =A0 situations. However, this applies only if there are<br>
&gt; more than one intermediate<br>
&gt; =A0 =A0 =A0 realms and the non-supporting realm is not next to the<br>
&gt; final destination.<br>
&gt;<br>
&gt; 3) Some intermediates do not support NAI decoration, the<br>
&gt; destination Diameter server<br>
&gt; =A0 =A0 does not support NAI decoration and no new application<br>
&gt; =A0 =A0 - NAIdime has the same issue as in 2)<br>
&gt; =A0 =A0 - NAIavi auth/authz probably fails as the User-Name does<br>
&gt; not correspond to the<br>
&gt; =A0 =A0 =A0 user identity (it is still decorated). This depends on<br>
&gt; the used auth/authz<br>
&gt; =A0 =A0 =A0 method though.<br>
&gt;<br>
&gt; 4) Some intermediates do not support NAI decoration, the<br>
&gt; destination Diameter server<br>
&gt; =A0 =A0 supports NAI decoration, new application<br>
&gt; =A0 =A0 - Both NAIdime &amp; NAIavi work ok (non-supporting agents<br>
&gt; get bypassed)<br>
&gt;<br>
&gt; 5) Some intermediates do not support NAI decoration, the<br>
&gt; destination Diameter server<br>
&gt; =A0 =A0 does not supports NAI decoration, new application<br>
&gt; =A0 =A0 - not applicable<br>
&gt;<br>
&gt; 6) Routing &quot;processing&quot; in an agent that supports NAI routin=
g<br>
&gt; =A0 =A0 - NAIdime modifies both User-Name and Destination-realm. Final=
<br>
&gt; =A0 =A0 =A0 routing decision still based on<br>
&gt; Destination-Realm+Application-id as<br>
&gt; =A0 =A0 =A0 defined in unmodified rfc3588.<br>
&gt; =A0 =A0 - NAIavi modifies only the User-Name. Final routing decision n=
eeds<br>
&gt; =A0 =A0 =A0 modifications to rfc3588 request routing as sometimes<br>
&gt; the routing<br>
&gt; =A0 =A0 =A0 is done based on the User-Name+Application-id and<br>
&gt; sometimes based<br>
&gt; =A0 =A0 =A0 on the Destination-Realm+Application-id.<br>
&gt;<br>
&gt;<br>
&gt; DId I miss some scenario? Or did I get some scenario wrong?<br>
&gt;<br>
&gt; Summarizing the above:<br>
&gt;<br>
&gt; 1) is trivial and probably the desired deployment scenario.<br>
&gt; 4) NAI routing coupled with a new application is the safe choice. Both=
<br>
&gt; =A0 =A0 NAIdime &amp; NAIavi always work OK.<br>
&gt; 3) is a valid scenario where both NAIdime &amp; NAIavi have issues. NA=
Iavi<br>
&gt; =A0 =A0 has probably less issues depending on the used auth/authz meth=
od.<br>
&gt; 2) here NAIavi has an advantage. From a protocol point of<br>
&gt; view it is not ok to<br>
&gt; =A0 =A0 define a solution that is known to break in other than a<br>
&gt; naive deployment<br>
&gt; =A0 =A0 scenario. From a practical point of view, I think the<br>
&gt; naive deployment<br>
&gt; =A0 =A0 scenario is probably what gets deployed in real life. However,=
 one<br>
&gt; =A0 =A0 could never be sure.<br>
&gt; 6) NAIavi probably requires more code changes in the existing<br>
&gt; rfc3588 code base.<br>
&gt; =A0 =A0 This could be a theoretical disadvantage though. I cannot<br>
&gt; really judge<br>
&gt; =A0 =A0 the amount of work required in other&#39;s products.<br>
&gt;<br>
&gt; So.. comments? Honestly, I tried to be objective ;)<br>
&gt;<br>
&gt; Cheers,<br>
&gt; =A0 =A0 =A0 Jouni<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; On Mar 11, 2009, at 12:38 AM, jouni wrote:<br>
&gt;<br>
&gt; &gt; Hi Avi,<br>
&gt; &gt;<br>
&gt; &gt; Thanks for the valuable input. See some comments inline.<br>
&gt; &gt;<br>
&gt; &gt; On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:<br>
&gt; &gt;<br>
&gt; &gt;&gt; I have inline comments as well as new comment:<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; The over arching problem as I see it is that when you read th=
e<br>
&gt; &gt;&gt; document, at least the introduction and abstract you get the =
sense<br>
&gt; &gt;&gt; that the draft is intending to fix base diameter behavior.<br=
>
&gt; &gt;<br>
&gt; &gt; That is the intent.<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; But in responses I get, I get the feeling that the intent<br>
&gt; is really<br>
&gt; &gt;&gt; to have an Application based routing scheme using NAI.<br>
&gt; &gt;&gt;<br>
&gt; &gt;<br>
&gt; &gt; Applications are recommended for cases where the requests<br>
&gt; pass through<br>
&gt; &gt; realms/networks where one cannot always claim that &quot;all my a=
gents<br>
&gt; &gt; implement RFC3588 + RFC-NAI-Routing&quot;. If you know that your<=
br>
&gt; networks<br>
&gt; &gt; support RFC3588 + RFC-NAI-Routing, there is no need to go for a n=
ew<br>
&gt; &gt; application. Section 4.3 is a recommendation for backwards<br>
&gt; &gt; compatibility.<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; If you are trying to fix base then we need a robust backwards=
<br>
&gt; &gt;&gt; compatible way of doing things. =A0As well, we can argue<br>
&gt; whether or not<br>
&gt; &gt;&gt; it should be placed in DIME. =A0There is more work to do.<br>
&gt; &gt;<br>
&gt; &gt; We at least seem to agree that something needs to be done ;)<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; If you are trying to write a document that describes how<br>
&gt; one would do<br>
&gt; &gt;&gt; Application routing using NAI. Then that does not belong<br>
&gt; in base so<br>
&gt; &gt;&gt; we should stop debating that. =A0And actually in this case<br=
>
&gt; what you are<br>
&gt; &gt;&gt; doing is fine and you are probably there.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; So which is it? =A0And once we pick we should be clear in the=
 text.<br>
&gt; &gt;<br>
&gt; &gt; Definitely this is not about doing only application routing<br>
&gt; using NAI.<br>
&gt; &gt; One of the goals is to be able to request a vendor e.g. &quot;giv=
e me an<br>
&gt; &gt; agent that implements RFC3588/RFC-NAI-Routing&quot;, without bein=
g more<br>
&gt; &gt; specific on applications.<br>
&gt; &gt;<br>
&gt; &gt; I reread Sections 4.1-4.2. Which parts are unclear? I am happy to=
<br>
&gt; &gt; reword.<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; We could come up with a hybrid solution by the way.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; If the priority is to make sure that the packet gets to the<b=
r>
&gt; &gt;&gt; destination, then:<br>
&gt; &gt;&gt; You set the destination-realm to the final destination and<br=
>
&gt; &gt;&gt; intermediaries that support decorated NAI use the decorated N=
AI<br>
&gt; &gt;&gt; without modification to the destination-realm.<br>
&gt; Intermediaries that<br>
&gt; &gt;&gt; don&#39;t know about decorated NAI will just perform the dest=
ination-<br>
&gt; &gt;&gt; realm routing. =A0As you point out you get looping but its<br=
>
&gt; not infinite<br>
&gt; &gt;&gt; looping. =A0At least the message would get to the final desti=
nation.<br>
&gt; &gt;<br>
&gt; &gt; The agent would send an error indicating a routing loop and<br>
&gt; then the<br>
&gt; &gt; agent MAY try an alternate route.. which would result<br>
&gt; another routing<br>
&gt; &gt; loop. I see no way out of this.<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; If NAI routing is the most important thing then you set the<b=
r>
&gt; &gt;&gt; destination-realm to the next hop of the Decorated NAI. =A0Ea=
ch hop<br>
&gt; &gt;&gt; that supports this scheme will use the decorated-nai and<br>
&gt; will update<br>
&gt; &gt;&gt; the realm. =A0If a hop is reached that does not understand de=
corated<br>
&gt; &gt;&gt; NAI then the packet will be consumed locally.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; Please see inline for more comments<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt; -----Original Message-----<br>
&gt; &gt;&gt;&gt; From: jouni korhonen [mailto:<a href=3D"mailto:jouni.nosp=
am@gmail.com">jouni.nospam@gmail.com</a>]<br>
&gt; &gt;&gt;&gt; Sent: March 3, 2009 5:44 PM<br>
&gt; &gt;&gt;&gt; To: Avi Lior<br>
&gt; &gt;&gt;&gt; Cc: <a href=3D"mailto:Lionel.morand@orange-ftgroup.com">L=
ionel.morand@orange-ftgroup.com</a>; Mark Jones;<br>
&gt; <a href=3D"mailto:tena@huawei.com">tena@huawei.com</a>;<br>
&gt; &gt;&gt;&gt; <a href=3D"mailto:Hannes.Tschofenig@gmx.net">Hannes.Tscho=
fenig@gmx.net</a>; <a href=3D"mailto:dime@ietf.org">dime@ietf.org</a><br>
&gt; &gt;&gt;&gt; Subject: Re: Dime NAI Routing<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; Hi Avi,<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; Thanks for reading &amp; commenting the I-D.<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; A couple of comments:<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; 1) =A0The draft should mention something about the pr=
esence of<br>
&gt; &gt;&gt;&gt;&gt; Destination-Host AVP.<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; The rule for routing is that the Destination-Host AVP=
 is<br>
&gt; &gt;&gt;&gt; not looked at<br>
&gt; &gt;&gt;&gt;&gt; until the message reaches the terminal realm as<br>
&gt; determined by the<br>
&gt; &gt;&gt;&gt;&gt; decorated NAI.<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; Where you would suggest to include the clarifying text?<b=
r>
&gt; In Section<br>
&gt; &gt;&gt;&gt; 4.2.?<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; I don&#39;t know. =A0I will have to look at the draft. This i=
s really a<br>
&gt; &gt;&gt; side issue and depends on the intent of the draft.<br>
&gt; &gt;<br>
&gt; &gt; Ok.<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; 2) I dont like the way Destination-Realm is being use=
d.<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; The draft states that the destination realm is update=
d on a<br>
&gt; &gt;&gt;&gt; hop by hop<br>
&gt; &gt;&gt;&gt;&gt; basis together with the decorated NAI.<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; I assume that is the only way to ensure the request<br>
&gt; message really<br>
&gt; &gt;&gt;&gt; goes through all wanted realms.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; Correct. =A0And in some cases NAI routing is going to be<br>
&gt; more important<br>
&gt; &gt;&gt; and in some cases it will be more important to make sure<br>
&gt; the message<br>
&gt; &gt;&gt; makes it all the way.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; If an intermediary is not compliant with the scheme<b=
r>
&gt; &gt;&gt;&gt; presented by this<br>
&gt; &gt;&gt;&gt;&gt; draft it will result in the intermediary consuming th=
e<br>
&gt; &gt;&gt;&gt; message locally<br>
&gt; &gt;&gt;&gt;&gt; - since the message contains the destination realm eq=
ual to<br>
&gt; &gt;&gt;&gt;&gt; its realm. =A0 Thus the message is not going to reach=
 the<br>
&gt; &gt;&gt;&gt;&gt; destination.<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; That is the reason why the I-D suggests only using the de=
coration<br>
&gt; &gt;&gt;&gt; stuff with a new application that is known to support<br>
&gt; this I-D. In<br>
&gt; &gt;&gt;&gt; that way legacy agents can be bypassed.<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; Okay so here you are clear this is Application based routing.=
<br>
&gt; &gt;<br>
&gt; &gt; This is suggested/recommended only when there is no<br>
&gt; guarantee that all<br>
&gt; &gt; agents implement the NAI routing. To my understanding all Diamete=
r<br>
&gt; &gt; routing is based on applications + realms anyway, so I<br>
&gt; don&#39;t see the<br>
&gt; &gt; problem.<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; Instead, I propose that the destination realm should =
be<br>
&gt; &gt;&gt;&gt; always set to<br>
&gt; &gt;&gt;&gt;&gt; the terminal realm, thus:<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; Agents that are compliant with the draft will first l=
ook at<br>
&gt; &gt;&gt;&gt; the NAI to<br>
&gt; &gt;&gt;&gt;&gt; determine whether the packet has reached the terminal=
 realm<br>
&gt; &gt;&gt;&gt; or where<br>
&gt; &gt;&gt;&gt;&gt; it should be routed next;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; Are you proposing to make the routing decision based on t=
he<br>
&gt; &gt;&gt;&gt; User-Name (and ignore the Destination-Realm all together)=
 in<br>
&gt; &gt;&gt;&gt; cases where 1) the agent supports this I-D and 2) the<br>
&gt; &gt;&gt;&gt; User-Name contains a decorated NAI?<br>
&gt; &gt;&gt;&gt; Once the decorated NAI would have been &quot;consumed&quo=
t; the<br>
&gt; &gt;&gt;&gt; checking would be based on the Destination-Realm again..?=
<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt; Almost. In the case where you want to guarantee packet delive=
ry<br>
&gt; &gt;&gt; irrespective of whether nodes are compliant with this draft, =
then<br>
&gt; &gt;&gt; you set the destination-realm to the final destination of the=
<br>
&gt; &gt;&gt; decorated NAI. =A0Agents that support your scheme would use t=
he<br>
&gt; &gt;&gt; decorated NAI to determine how to route to the next hop. =A0A=
gents<br>
&gt; &gt;&gt; that don&#39;t support your scheme will use the destination-r=
ealm to<br>
&gt; &gt;&gt; determine how to route to the next hop (they will ignore the<=
br>
&gt; &gt;&gt; decorated NAI).<br>
&gt; &gt;<br>
&gt; &gt; Ok. That was close enough to my understanding ;) So, the route<br=
>
&gt; &gt; decision would be:<br>
&gt; &gt;<br>
&gt; &gt; 1) case NAI routing supported:<br>
&gt; &gt; =A0 route decision: User-Name + Application<br>
&gt; &gt; =A0 if User-Name&#39;s @realm matches agent&#39;s own realm, prec=
ess the NAI<br>
&gt; &gt;<br>
&gt; &gt; 2) case normal RFC3588<br>
&gt; &gt; =A0 route decision: Destination-Realm + Application<br>
&gt; &gt; =A0 Modify: none<br>
&gt; &gt;<br>
&gt; &gt; right?<br>
&gt; &gt;<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; Agents that are not compatible with the draft will us=
e the<br>
&gt; &gt;&gt;&gt; old rules<br>
&gt; &gt;&gt;&gt;&gt; for routing and would route the message according to =
the<br>
&gt; &gt;&gt;&gt; destination-<br>
&gt; &gt;&gt;&gt;&gt; realm only and thus the message will reach the final =
destintaion<br>
&gt; &gt;&gt;&gt;&gt; albeit not necessarily according to the decorated NAI=
. But<br>
&gt; &gt;&gt;&gt; at least it<br>
&gt; &gt;&gt;&gt;&gt; would work.<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt; Did I miss anything?<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; What happens if.. the route happens to have some<br>
&gt; &gt;&gt;&gt; non-compliant agents and when the request reaches its fin=
al<br>
&gt; &gt;&gt;&gt; end (e.g. according to the inter-connection architecture)=
 the<br>
&gt; &gt;&gt;&gt; User-Name still has decorated NAI?<br>
&gt; &gt;&gt;&gt; Would the decorated NAI compliant server/proxy send to<br=
>
&gt; &gt;&gt;&gt; request back to some other realm pointed by the User-name=
?<br>
&gt; &gt;&gt;&gt; This would effectively cause a routing loop, right?<br>
&gt; &gt;&gt; No. It may cause a loop but it wont be an infinite loop. =A0S=
o it<br>
&gt; &gt;&gt; depends, in some cases I may be okay with have strange<br>
&gt; routing but<br>
&gt; &gt;&gt; I will at least get the packet there. So it depends what I<br=
>
&gt; want to<br>
&gt; &gt;&gt; achieve.<br>
&gt; &gt;<br>
&gt; &gt; There is no guarantee that the alternate route selected by<br>
&gt; the agent<br>
&gt; &gt; that discovered the loop would result to any better outcome. The<=
br>
&gt; &gt; alternate route could again route traffic back.<br>
&gt; &gt;<br>
&gt; &gt; Cheers,<br>
&gt; &gt; =A0 =A0 Jouni<br>
&gt; &gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt; Cheers,<br>
&gt; &gt;&gt;&gt; =A0 =A0 =A0 Jouni<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;&gt;&gt;<br>
&gt; &gt;<br>
&gt; &gt; _______________________________________________<br>
&gt; &gt; DiME mailing list<br>
&gt; &gt; <a href=3D"mailto:DiME@ietf.org">DiME@ietf.org</a><br>
&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/dime" target=3D"=
_blank">https://www.ietf.org/mailman/listinfo/dime</a><br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; DiME mailing list<br>
&gt; <a href=3D"mailto:DiME@ietf.org">DiME@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/dime" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/dime</a><br>
&gt;<br>
_______________________________________________<br>
DiME mailing list<br>
<a href=3D"mailto:DiME@ietf.org">DiME@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/dime" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/dime</a><br>
</div></div></blockquote></div><br></div>

--000e0cd14dee73c7c50466438a90--

From jouni.nospam@gmail.com  Sun Mar 29 14:54:39 2009
Return-Path: <jouni.nospam@gmail.com>
X-Original-To: dime@core3.amsl.com
Delivered-To: dime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A13283A67EA for <dime@core3.amsl.com>; Sun, 29 Mar 2009 14:54:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IoctRBQd3DvP for <dime@core3.amsl.com>; Sun, 29 Mar 2009 14:54:37 -0700 (PDT)
Received: from mail-bw0-f169.google.com (mail-bw0-f169.google.com [209.85.218.169]) by core3.amsl.com (Postfix) with ESMTP id 0BADA3A6814 for <dime@ietf.org>; Sun, 29 Mar 2009 14:54:36 -0700 (PDT)
Received: by bwz17 with SMTP id 17so1693779bwz.37 for <dime@ietf.org>; Sun, 29 Mar 2009 14:55:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=bxGEHPZYfrX5c2/lt2Ll0j2/TnYR1VGeyn8C56ckyqE=; b=NsSG2UWDeOXXgrPJUMF+IVEEQVgZ8iSNKk5dyNzyKQ22YzPpKP4sKXL12gNikm2Ji6 1Dmi1vz9JUGQ/NxaQ4pm7CCeLUroLcMMcosgrY4IW+l7SmN3NbxI03Sqme3uluDCX8CT rO1LLwqelKZMO2HNMIA8HiFcsmcWRv6SMDkT0=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=HQVpOx9r0Rn7ZjS4zF9AnzT8VIDNW2CptseIw9VqM3YoIoacmEwbRqB8Rd95iS9fRo b2CP323RZPq1sBZTRIl1BcItLTLRvDko8YDB7G2RvhOQYlDCtbMypmCeA48cId63uN3s 1RVjkeQuWNQnGLEnnUXJPxqyKcL2hkAyYetx4=
Received: by 10.204.68.15 with SMTP id t15mr1666698bki.139.1238363732858; Sun, 29 Mar 2009 14:55:32 -0700 (PDT)
Received: from 80-186-94-247.elisa-mobile.fi (80-186-94-247.elisa-mobile.fi [80.186.94.247]) by mx.google.com with ESMTPS id b17sm2028720fka.4.2009.03.29.14.55.28 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 29 Mar 2009 14:55:32 -0700 (PDT)
Message-Id: <E4AEA882-0013-4231-9BC6-57A0E6B4A6FB@gmail.com>
From: jouni korhonen <jouni.nospam@gmail.com>
To: Ravi <nrs2712@gmail.com>
In-Reply-To: <1bdcf2860903290822g354da609r33773502c11b5f49@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Mon, 30 Mar 2009 00:55:26 +0300
References: <8A8CFE8F89C38B41A749C19328C76D6308CE370C8D@exchange02.bridgewatersys.com> <33E4FE18-7715-413B-A029-924F5A1070A2@gmail.com> <8A8CFE8F89C38B41A749C19328C76D6308D67C1130@exchange02.bridgewatersys.com> <AE8AEF18-2A9E-449B-BFA3-D3CF6E3C5193@gmail.com> <1074EF5D-70BA-4A93-B36A-72F723182519@gmail.com> <7DBAFEC6A76F3E42817DF1EBE64CB0260652F985@ftrdmel2> <8A8CFE8F89C38B41A749C19328C76D6308D680CC36@exchange02.bridgewatersys.com> <1bdcf2860903290822g354da609r33773502c11b5f49@mail.gmail.com>
X-Mailer: Apple Mail (2.930.3)
Cc: Mark Jones <Mark.Jones@bridgewatersystems.com>, "dime@ietf.org" <dime@ietf.org>
Subject: Re: [Dime] Dime NAI Routing
X-BeenThere: dime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Diameter Maintanence and Extentions Working Group <dime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dime>
List-Post: <mailto:dime@ietf.org>
List-Help: <mailto:dime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dime>, <mailto:dime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Mar 2009 21:54:39 -0000

Hi Ravi,

Thanks for reading & commenting the draft. See my comments inline.


On Mar 29, 2009, at 6:22 PM, Ravi wrote:

> These are my views after going through the NAI draft
>
> 1) As pointed out by Avi Lior -  Modifying the destination-realm on =20=

> a hop by hop basis is not required. IMO, the destination-realm AVP =20
> should reflect the actual destination(and not the intermediate =20
> destination), the request is supposed to be routed to.

We had some discussion on this during the Dime meeting. It seems that =20=

if one doesn't modify destination-realm on each hop, preventing =20
routing loops become somewhat ugly. It looks like the only solid =20
approach is requiring a new application and handling the NAI routing =20
on the application level. And if new applications are involved then =20
destination-realm more or less has to be modified on each realm. =20
Otherwise, making sure that a proxy at each realm actually forwards =20
the request to the application level handling is not that obvious.

>
> 2) IMO, in its current form the draft is suggesting only one =20
> mechanism to achieve "force routing of messages to the home realm =20
> through a predefined list of realms". However, there are other =20
> methods of achieving the same purpose like using another AVP called =20=

> Realm-Path AVP which is added by the client before sending the =20
> request. If we use a separate AVP for this purpose then there would =20=

> be a clear differentiation between Routing AVPs and non-Routing AVPs.

The draft tries to align Diameter with current practices and existing =20=

specs that actually assume Diameter supports NAI routing.

>        In the draft, the user-name AVP is used as a routing AVP by =20
> all the proxies in the path of the request whereas the server uses =20
> it as a non-Routing AVP (for authorization)

This is an unfortunate side effect. Partly because of this reason, one =20=

would like to make sure the intermediating proxies have actually =20
"consumed" the whole decorated NAI. Otherwise the receiving server =20
might get confused if the user-name still contains a decorated NAI.

Cheers,
	Jouni


>
> Ravi
>
> On Tue, Mar 24, 2009 at 7:42 AM, Avi Lior =20
> <avi@bridgewatersystems.com> wrote:
> Okay by that logic then no routing loops will occur and thus the =20
> correct approach is to use decorated NAI and still setting the =20
> destination realm to the final realm.
>
> Since everyone will play by the same game, the intermediaries would =20=

> use the NAI to route and not the destination realm.
>
> Why then do we have to modify the destination-realm on a hop by hop =20=

> basis.  That makes no sense.
>
> ________________________________________
> From: lionel.morand@orange-ftgroup.com =
[lionel.morand@orange-ftgroup.com=20
> ]
> Sent: Monday, March 23, 2009 10:00 PM
> To: jouni.nospam@gmail.com; Avi Lior
> Cc: Mark Jones; dime@ietf.org
> Subject: RE: [Dime] Dime NAI Routing
>
> Simple question:
>
> All the decorated NAI handling described in the draft is based on =20
> the fact that there are "pre-existing" AAA roaming agreements =20
> between partners, established long before the first access request =20
> for a given user.
>
> Could we just assume that all the partners belonging to AAA roaming =20=

> agreements (and used by the UE to construct the Decorated NAI) MUST =20=

> support the NAI Decoration?
> If one of them doesn't support the NAI decoration, the handling of =20
> the request will fail but, in that case, this network should not be =20=

> part of the roaming agreements. That is, "MUST" is a must if you =20
> want to be part of the game.
>
> What we are saying here is that something could be wrong if someone =20=

> does bad things. However, the basic principle of roaming agreements =20=

> is that everyone plays the same game, with the rules, with the same =20=

> part.
>
> Lionel
>
> > -----Message d'origine-----
> > De : dime-bounces@ietf.org [mailto:dime-bounces@ietf.org] De
> > la part de jouni korhonen
> > Envoy=E9 : jeudi 12 mars 2009 11:53
> > =C0 : Avi Lior
> > Cc : Mark Jones; MORAND Lionel RD-CORE-ISS; dime@ietf.org
> > Objet : Re: [Dime] Dime NAI Routing
> >
> >
> >
> > I had some more thoughts around Avi's proposal and made a
> > small summary and comparison of pros & cons. NAIdime means
> > the solution proposed in the Dime draft. NAIavi is Avi's proposal.
> >
> > 1) All intermediates and peers support their own proposed
> > solutions and
> >     no new application
> >     - Both NAIdime & NAIavi work fine
> >
> > 2) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     supports NAI decoration and no new application
> >     - NAIdime causes an "early" consumption of the request,
> > which would
> >       cause the auth/authz fail in all realistic situations
> >     - NAIavi would cause a routing loop and auth/authz to
> > fail in all realistic
> >       situations. However, this applies only if there are
> > more than one intermediate
> >       realms and the non-supporting realm is not next to the
> > final destination.
> >
> > 3) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     does not support NAI decoration and no new application
> >     - NAIdime has the same issue as in 2)
> >     - NAIavi auth/authz probably fails as the User-Name does
> > not correspond to the
> >       user identity (it is still decorated). This depends on
> > the used auth/authz
> >       method though.
> >
> > 4) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     supports NAI decoration, new application
> >     - Both NAIdime & NAIavi work ok (non-supporting agents
> > get bypassed)
> >
> > 5) Some intermediates do not support NAI decoration, the
> > destination Diameter server
> >     does not supports NAI decoration, new application
> >     - not applicable
> >
> > 6) Routing "processing" in an agent that supports NAI routing
> >     - NAIdime modifies both User-Name and Destination-realm. Final
> >       routing decision still based on
> > Destination-Realm+Application-id as
> >       defined in unmodified rfc3588.
> >     - NAIavi modifies only the User-Name. Final routing decision =20
> needs
> >       modifications to rfc3588 request routing as sometimes
> > the routing
> >       is done based on the User-Name+Application-id and
> > sometimes based
> >       on the Destination-Realm+Application-id.
> >
> >
> > DId I miss some scenario? Or did I get some scenario wrong?
> >
> > Summarizing the above:
> >
> > 1) is trivial and probably the desired deployment scenario.
> > 4) NAI routing coupled with a new application is the safe choice. =20=

> Both
> >     NAIdime & NAIavi always work OK.
> > 3) is a valid scenario where both NAIdime & NAIavi have issues. =20
> NAIavi
> >     has probably less issues depending on the used auth/authz =20
> method.
> > 2) here NAIavi has an advantage. =46rom a protocol point of
> > view it is not ok to
> >     define a solution that is known to break in other than a
> > naive deployment
> >     scenario. =46rom a practical point of view, I think the
> > naive deployment
> >     scenario is probably what gets deployed in real life. However, =20=

> one
> >     could never be sure.
> > 6) NAIavi probably requires more code changes in the existing
> > rfc3588 code base.
> >     This could be a theoretical disadvantage though. I cannot
> > really judge
> >     the amount of work required in other's products.
> >
> > So.. comments? Honestly, I tried to be objective ;)
> >
> > Cheers,
> >       Jouni
> >
> >
> >
> > On Mar 11, 2009, at 12:38 AM, jouni wrote:
> >
> > > Hi Avi,
> > >
> > > Thanks for the valuable input. See some comments inline.
> > >
> > > On Mar 10, 2009, at 3:56 PM, Avi Lior wrote:
> > >
> > >> I have inline comments as well as new comment:
> > >>
> > >> The over arching problem as I see it is that when you read the
> > >> document, at least the introduction and abstract you get the =20
> sense
> > >> that the draft is intending to fix base diameter behavior.
> > >
> > > That is the intent.
> > >
> > >>
> > >> But in responses I get, I get the feeling that the intent
> > is really
> > >> to have an Application based routing scheme using NAI.
> > >>
> > >
> > > Applications are recommended for cases where the requests
> > pass through
> > > realms/networks where one cannot always claim that "all my agents
> > > implement RFC3588 + RFC-NAI-Routing". If you know that your
> > networks
> > > support RFC3588 + RFC-NAI-Routing, there is no need to go for a =20=

> new
> > > application. Section 4.3 is a recommendation for backwards
> > > compatibility.
> > >
> > >
> > >>
> > >> If you are trying to fix base then we need a robust backwards
> > >> compatible way of doing things.  As well, we can argue
> > whether or not
> > >> it should be placed in DIME.  There is more work to do.
> > >
> > > We at least seem to agree that something needs to be done ;)
> > >
> > >>
> > >> If you are trying to write a document that describes how
> > one would do
> > >> Application routing using NAI. Then that does not belong
> > in base so
> > >> we should stop debating that.  And actually in this case
> > what you are
> > >> doing is fine and you are probably there.
> > >>
> > >> So which is it?  And once we pick we should be clear in the text.
> > >
> > > Definitely this is not about doing only application routing
> > using NAI.
> > > One of the goals is to be able to request a vendor e.g. "give me =20=

> an
> > > agent that implements RFC3588/RFC-NAI-Routing", without being more
> > > specific on applications.
> > >
> > > I reread Sections 4.1-4.2. Which parts are unclear? I am happy to
> > > reword.
> > >
> > >>
> > >> We could come up with a hybrid solution by the way.
> > >>
> > >> If the priority is to make sure that the packet gets to the
> > >> destination, then:
> > >> You set the destination-realm to the final destination and
> > >> intermediaries that support decorated NAI use the decorated NAI
> > >> without modification to the destination-realm.
> > Intermediaries that
> > >> don't know about decorated NAI will just perform the destination-
> > >> realm routing.  As you point out you get looping but its
> > not infinite
> > >> looping.  At least the message would get to the final =20
> destination.
> > >
> > > The agent would send an error indicating a routing loop and
> > then the
> > > agent MAY try an alternate route.. which would result
> > another routing
> > > loop. I see no way out of this.
> > >
> > >>
> > >>
> > >> If NAI routing is the most important thing then you set the
> > >> destination-realm to the next hop of the Decorated NAI.  Each hop
> > >> that supports this scheme will use the decorated-nai and
> > will update
> > >> the realm.  If a hop is reached that does not understand =20
> decorated
> > >> NAI then the packet will be consumed locally.
> > >>
> > >>
> > >>
> > >> Please see inline for more comments
> > >>
> > >>> -----Original Message-----
> > >>> From: jouni korhonen [mailto:jouni.nospam@gmail.com]
> > >>> Sent: March 3, 2009 5:44 PM
> > >>> To: Avi Lior
> > >>> Cc: Lionel.morand@orange-ftgroup.com; Mark Jones;
> > tena@huawei.com;
> > >>> Hannes.Tschofenig@gmx.net; dime@ietf.org
> > >>> Subject: Re: Dime NAI Routing
> > >>>
> > >>> Hi Avi,
> > >>>
> > >>> Thanks for reading & commenting the I-D.
> > >>>
> > >>> On Mar 2, 2009, at 11:41 PM, Avi Lior wrote:
> > >>>
> > >>>> A couple of comments:
> > >>>>
> > >>>> 1)  The draft should mention something about the presence of
> > >>>> Destination-Host AVP.
> > >>>>
> > >>>> The rule for routing is that the Destination-Host AVP is
> > >>> not looked at
> > >>>> until the message reaches the terminal realm as
> > determined by the
> > >>>> decorated NAI.
> > >>>
> > >>> Where you would suggest to include the clarifying text?
> > In Section
> > >>> 4.2.?
> > >>
> > >> I don't know.  I will have to look at the draft. This is really a
> > >> side issue and depends on the intent of the draft.
> > >
> > > Ok.
> > >
> > >>
> > >>
> > >>>
> > >>>
> > >>>> 2) I dont like the way Destination-Realm is being used.
> > >>>>
> > >>>> The draft states that the destination realm is updated on a
> > >>> hop by hop
> > >>>> basis together with the decorated NAI.
> > >>>
> > >>> I assume that is the only way to ensure the request
> > message really
> > >>> goes through all wanted realms.
> > >>
> > >> Correct.  And in some cases NAI routing is going to be
> > more important
> > >> and in some cases it will be more important to make sure
> > the message
> > >> makes it all the way.
> > >>
> > >>>
> > >>>> If an intermediary is not compliant with the scheme
> > >>> presented by this
> > >>>> draft it will result in the intermediary consuming the
> > >>> message locally
> > >>>> - since the message contains the destination realm equal to
> > >>>> its realm.   Thus the message is not going to reach the
> > >>>> destination.
> > >>>
> > >>> That is the reason why the I-D suggests only using the =20
> decoration
> > >>> stuff with a new application that is known to support
> > this I-D. In
> > >>> that way legacy agents can be bypassed.
> > >>
> > >> Okay so here you are clear this is Application based routing.
> > >
> > > This is suggested/recommended only when there is no
> > guarantee that all
> > > agents implement the NAI routing. To my understanding all Diameter
> > > routing is based on applications + realms anyway, so I
> > don't see the
> > > problem.
> > >
> > >>
> > >>>>
> > >>>> Instead, I propose that the destination realm should be
> > >>> always set to
> > >>>> the terminal realm, thus:
> > >>>>
> > >>>> Agents that are compliant with the draft will first look at
> > >>> the NAI to
> > >>>> determine whether the packet has reached the terminal realm
> > >>> or where
> > >>>> it should be routed next;
> > >>>
> > >>> Are you proposing to make the routing decision based on the
> > >>> User-Name (and ignore the Destination-Realm all together) in
> > >>> cases where 1) the agent supports this I-D and 2) the
> > >>> User-Name contains a decorated NAI?
> > >>> Once the decorated NAI would have been "consumed" the
> > >>> checking would be based on the Destination-Realm again..?
> > >>
> > >> Almost. In the case where you want to guarantee packet delivery
> > >> irrespective of whether nodes are compliant with this draft, then
> > >> you set the destination-realm to the final destination of the
> > >> decorated NAI.  Agents that support your scheme would use the
> > >> decorated NAI to determine how to route to the next hop.  Agents
> > >> that don't support your scheme will use the destination-realm to
> > >> determine how to route to the next hop (they will ignore the
> > >> decorated NAI).
> > >
> > > Ok. That was close enough to my understanding ;) So, the route
> > > decision would be:
> > >
> > > 1) case NAI routing supported:
> > >   route decision: User-Name + Application
> > >   if User-Name's @realm matches agent's own realm, precess the NAI
> > >
> > > 2) case normal RFC3588
> > >   route decision: Destination-Realm + Application
> > >   Modify: none
> > >
> > > right?
> > >
> > >
> > >>
> > >>
> > >>>> Agents that are not compatible with the draft will use the
> > >>> old rules
> > >>>> for routing and would route the message according to the
> > >>> destination-
> > >>>> realm only and thus the message will reach the final =20
> destintaion
> > >>>> albeit not necessarily according to the decorated NAI. But
> > >>> at least it
> > >>>> would work.
> > >>>>
> > >>>>
> > >>>> Did I miss anything?
> > >>>
> > >>> What happens if.. the route happens to have some
> > >>> non-compliant agents and when the request reaches its final
> > >>> end (e.g. according to the inter-connection architecture) the
> > >>> User-Name still has decorated NAI?
> > >>> Would the decorated NAI compliant server/proxy send to
> > >>> request back to some other realm pointed by the User-name?
> > >>> This would effectively cause a routing loop, right?
> > >> No. It may cause a loop but it wont be an infinite loop.  So it
> > >> depends, in some cases I may be okay with have strange
> > routing but
> > >> I will at least get the packet there. So it depends what I
> > want to
> > >> achieve.
> > >
> > > There is no guarantee that the alternate route selected by
> > the agent
> > > that discovered the loop would result to any better outcome. The
> > > alternate route could again route traffic back.
> > >
> > > Cheers,
> > >     Jouni
> > >
> > >>
> > >>
> > >>>
> > >>> Cheers,
> > >>>       Jouni
> > >>>
> > >>>
> > >>>
> > >>>>
> > >>>>
> > >>>
> > >>>
> > >
> > > _______________________________________________
> > > DiME mailing list
> > > DiME@ietf.org
> > > https://www.ietf.org/mailman/listinfo/dime
> >
> > _______________________________________________
> > DiME mailing list
> > DiME@ietf.org
> > https://www.ietf.org/mailman/listinfo/dime
> >
> _______________________________________________
> DiME mailing list
> DiME@ietf.org
> https://www.ietf.org/mailman/listinfo/dime
>

