From off-path-bof-bounces@ietf.org Sun Sep 17 23:36:39 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GP9vl-0007Zh-2y; Sun, 17 Sep 2006 23:36:25 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GP9vj-0007Uz-BN
	for off-path-bof@ietf.org; Sun, 17 Sep 2006 23:36:23 -0400
Received: from szxga03-in.huawei.com ([61.144.161.55])
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GP9vh-0002nE-RB
	for off-path-bof@ietf.org; Sun, 17 Sep 2006 23:36:23 -0400
Received: from huawei.com (szxga03-in [172.24.2.9])
	by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTP id <0J5R004SZRTH9I@szxga03-in.huawei.com> for
	off-path-bof@ietf.org; Mon, 18 Sep 2006 11:46:29 +0800 (CST)
Received: from huawei.com ([172.24.1.18])
	by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTP id <0J5R005O0RTGE4@szxga03-in.huawei.com> for
	off-path-bof@ietf.org; Mon, 18 Sep 2006 11:46:29 +0800 (CST)
Received: from w52438 ([10.164.5.109])
	by szxml03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTPA id <0J5R00BY3RJDKN@szxml03-in.huawei.com> for
	off-path-bof@ietf.org; Mon, 18 Sep 2006 11:40:29 +0800 (CST)
Date: Mon, 18 Sep 2006 11:35:27 +0800
From: Kylin Wei <weiqikun@huawei.com>
To: off-path-bof@ietf.org
Message-id: <000001c6dad3$7c05b020$6d05a40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Thread-index: Acba03uagkps0lRsSqONKRJgRI3pqw==
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 7bac9cb154eb5790ae3b2913587a40de
Subject: [OFF-PATH-BOF] How does an endpoint discover a local policy by DHCP?
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org

Dear off-path experts,

How does an endpoint discover a local policy by DHCP? Who can tell me
detailed approach?

Thanks in advance.

Kylin Wei 



_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



From off-path-bof-bounces@ietf.org Mon Sep 18 07:19:06 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPH9R-0004uz-Un; Mon, 18 Sep 2006 07:19:01 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPH9Q-0004uu-Q9
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 07:19:00 -0400
Received: from exchfe1.cs.cornell.edu ([128.84.97.27])
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPH9O-0000Rx-IL
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 07:19:00 -0400
Received: from EXCHANGE2.cs.cornell.edu ([128.84.96.44]) by
	exchfe1.cs.cornell.edu with Microsoft SMTPSVC(6.0.3790.1830); 
	Mon, 18 Sep 2006 07:18:57 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
Date: Mon, 18 Sep 2006 07:18:53 -0400
Message-ID: <E6F7A586E0A3F94D921755964F6BE0063FDDBD@EXCHANGE2.cs.cornell.edu>
In-Reply-To: <000001c6dad3$7c05b020$6d05a40a@china.huawei.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
Thread-Index: Acba03uagkps0lRsSqONKRJgRI3pqwAQKbKg
From: "Paul Francis" <francis@cs.cornell.edu>
To: "Kylin Wei" <weiqikun@huawei.com>,
	<off-path-bof@ietf.org>
X-OriginalArrivalTime: 18 Sep 2006 11:18:57.0994 (UTC)
	FILETIME=[3C0CD2A0:01C6DB14]
X-Spam-Score: 0.0 (/)
X-Scan-Signature: ea4ac80f790299f943f0a53be7e1a21a
Cc: 
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org


I don't think any of us envisioned that an endpoint would learn policy =
via
DHCP.

PF
=20

-----Original Message-----
From: Kylin Wei [mailto:weiqikun@huawei.com]=20
Sent: Sunday, September 17, 2006 11:35 PM
To: off-path-bof@ietf.org
Subject: [OFF-PATH-BOF] How does an endpoint discover a local policy by =
DHCP?

Dear off-path experts,

How does an endpoint discover a local policy by DHCP? Who can tell me
detailed approach?

Thanks in advance.

Kylin Wei=20



_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof

_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



From off-path-bof-bounces@ietf.org Mon Sep 18 08:27:59 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPIEB-0007qf-1H; Mon, 18 Sep 2006 08:27:59 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPIE9-0007qZ-GK
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 08:27:57 -0400
Received: from willers.employees.org ([192.83.249.36])
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPIE8-0003zR-88
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 08:27:57 -0400
Received: from [10.86.241.25] (bxb-natpool-121.cisco.com [12.159.148.121])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested) (Authenticated sender: sbrim)
	by willers.employees.org (Postfix) with ESMTP id 487995CCD9;
	Mon, 18 Sep 2006 05:27:53 -0700 (PDT)
Message-ID: <450E90C7.5030701@employees.org>
Date: Mon, 18 Sep 2006 08:27:51 -0400
From: Scott W Brim <swb@employees.org>
Organization: Cisco Systems, Inc.
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.8.0.7) Gecko/20060909 Thunderbird/1.5.0.7 Mnenhy/0.7.4.0
MIME-Version: 1.0
To: Paul Francis <francis@cs.cornell.edu>
Subject: Re: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
References: <E6F7A586E0A3F94D921755964F6BE0063FDDBD@EXCHANGE2.cs.cornell.edu>
In-Reply-To: <E6F7A586E0A3F94D921755964F6BE0063FDDBD@EXCHANGE2.cs.cornell.edu>
X-Enigmail-Version: 0.94.0.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 6d62ab47271805379d7172ee693a45db
Cc: off-path-bof@ietf.org
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org

On 09/18/2006 07:18 AM, Paul Francis allegedly wrote:
> I don't think any of us envisioned that an endpoint would learn policy via
> DHCP.

Rather, a policy server?

_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



From off-path-bof-bounces@ietf.org Mon Sep 18 08:45:24 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPIUy-0005bn-AU; Mon, 18 Sep 2006 08:45:20 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPIUw-0005bi-HC
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 08:45:18 -0400
Received: from mail.gmx.net ([213.165.64.20])
	by ietf-mx.ietf.org with smtp (Exim 4.43) id 1GPIUv-0007lh-3h
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 08:45:18 -0400
Received: (qmail invoked by alias); 18 Sep 2006 12:45:15 -0000
Received: from unknown (EHLO [192.168.1.66]) [66.54.228.162]
	by mail.gmx.net (mp002) with SMTP; 18 Sep 2006 14:45:15 +0200
X-Authenticated: #29516787
Message-ID: <450E94E3.2060202@gmx.net>
Date: Mon, 18 Sep 2006 08:45:23 -0400
From: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
To: Scott W Brim <swb@employees.org>
Subject: Re: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
References: <E6F7A586E0A3F94D921755964F6BE0063FDDBD@EXCHANGE2.cs.cornell.edu>
	<450E90C7.5030701@employees.org>
In-Reply-To: <450E90C7.5030701@employees.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Y-GMX-Trusted: 0
X-Spam-Score: 0.0 (/)
X-Scan-Signature: d6b246023072368de71562c0ab503126
Cc: off-path-bof@ietf.org
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org

What type of policies are we talking about?

Ciao
Hannes

Scott W Brim schrieb:
> On 09/18/2006 07:18 AM, Paul Francis allegedly wrote:
>> I don't think any of us envisioned that an endpoint would learn policy via
>> DHCP.
> 
> Rather, a policy server?
> 
> _______________________________________________
> OFF-PATH-BOF mailing list
> OFF-PATH-BOF@ietf.org
> https://www1.ietf.org/mailman/listinfo/off-path-bof
> 
> 


_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



From off-path-bof-bounces@ietf.org Mon Sep 18 09:54:26 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPJZq-0000Ij-5v; Mon, 18 Sep 2006 09:54:26 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPJZo-0000Ie-E4
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 09:54:24 -0400
Received: from exchfe1.cs.cornell.edu ([128.84.97.27])
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPJZn-0001CH-7S
	for off-path-bof@ietf.org; Mon, 18 Sep 2006 09:54:24 -0400
Received: from EXCHANGE2.cs.cornell.edu ([128.84.96.44]) by
	exchfe1.cs.cornell.edu with Microsoft SMTPSVC(6.0.3790.1830); 
	Mon, 18 Sep 2006 09:54:22 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
Date: Mon, 18 Sep 2006 09:54:18 -0400
Message-ID: <E6F7A586E0A3F94D921755964F6BE0063FDDE1@EXCHANGE2.cs.cornell.edu>
In-Reply-To: <450E90C7.5030701@employees.org>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
Thread-Index: AcbbHd7dbsIQ6wbfTXWzGC8m6KXsOwAC7tpA
From: "Paul Francis" <francis@cs.cornell.edu>
To: "Scott W Brim" <swb@employees.org>
X-OriginalArrivalTime: 18 Sep 2006 13:54:22.0860 (UTC)
	FILETIME=[F21A74C0:01C6DB29]
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 2409bba43e9c8d580670fda8b695204a
Cc: off-path-bof@ietf.org
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org


How the boxes that have policy get their policy I think of as peripheral =
to
the core problem.  There may of course be lots of value in standardizing =
this
interface (in what we implemented, we use CPL), but as a researcher I =
don't
see any particularly interesting issues here.  Am I wrong?

PF
=20

-----Original Message-----
From: Scott W Brim [mailto:swb@employees.org]=20
Sent: Monday, September 18, 2006 8:28 AM
To: Paul Francis
Cc: Kylin Wei; off-path-bof@ietf.org
Subject: Re: [OFF-PATH-BOF] How does an endpoint discover a local policy =
by
DHCP?

On 09/18/2006 07:18 AM, Paul Francis allegedly wrote:
> I don't think any of us envisioned that an endpoint would learn policy =

> via DHCP.

Rather, a policy server?

_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



From off-path-bof-bounces@ietf.org Tue Sep 19 02:08:39 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPYmY-0005wU-OY; Tue, 19 Sep 2006 02:08:34 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPYmW-0005ud-LK
	for off-path-bof@ietf.org; Tue, 19 Sep 2006 02:08:32 -0400
Received: from exchfenlb-2.cs.cornell.edu ([128.84.97.34]
	helo=exchfe2.cs.cornell.edu)
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPYmV-0002xl-D9
	for off-path-bof@ietf.org; Tue, 19 Sep 2006 02:08:32 -0400
Received: from exchfe1.cs.cornell.edu ([128.84.97.27]) by
	exchfe2.cs.cornell.edu with Microsoft SMTPSVC(6.0.3790.1830); 
	Tue, 19 Sep 2006 02:08:29 -0400
Received: from pit002.cs.cornell.edu ([128.84.223.102]) by
	exchfe1.cs.cornell.edu over TLS secured channel with Microsoft
	SMTPSVC(6.0.3790.1830); Tue, 19 Sep 2006 02:08:28 -0400
Subject: Re: [OFF-PATH-BOF] How does an endpoint discover a local policy by
	DHCP?
From: Saikat Guha <saikat@cs.cornell.edu>
To: Scott W Brim <swb@employees.org>
In-Reply-To: <450E90C7.5030701@employees.org>
References: <E6F7A586E0A3F94D921755964F6BE0063FDDBD@EXCHANGE2.cs.cornell.edu>
	<450E90C7.5030701@employees.org>
Organization: Cornell University
Date: Tue, 19 Sep 2006 02:08:48 -0400
Message-Id: <1158646129.2966.32.camel@localhost.localdomain>
Mime-Version: 1.0
X-Mailer: Evolution 2.6.3 (2.6.3-1.fc5.5) 
X-OriginalArrivalTime: 19 Sep 2006 06:08:28.0035 (UTC)
	FILETIME=[06246D30:01C6DBB2]
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 4d87d2aa806f79fed918a62e834505ca
Cc: off-path-bof@ietf.org
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0079520154=="
Errors-To: off-path-bof-bounces@ietf.org


--===============0079520154==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="=-1d524/YXPQZ/1tx2NVlP"


--=-1d524/YXPQZ/1tx2NVlP
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Mon, 2006-09-18 at 08:27 -0400, Scott W Brim wrote:
> On 09/18/2006 07:18 AM, Paul Francis allegedly wrote:
> > I don't think any of us envisioned that an endpoint would learn policy =
via
> > DHCP.
>=20
> Rather, a policy server?

If the question is how someone learns of which policy server to use ...

Signaling packets go 1) up, 2) across, and 3) down; and the next-hop
policy server on each segment is determined differently.

1) UP: Drilling out towards the Internet through multiple layers of
firewalls ... a packet (any packet) is sent outwards, a firewall/M-Box
intercepts it and responds with an ICMP-like error message that informs
the source what policy server to contact for auth.

2) ACROSS: Packet goes from internet-facing firewall of the stack of
firewalls for the source to the internet-facing firewall of the
recipient. The signaling server for the recipient's domain is resolved
over DNS through SRV-type records.

3) DOWN: Drilling down to the destination through multiple firewalls.
When the destination registers its presence it creates a chain of
registrations to the internet-facing signaling proxy for his domain
(chain discovered through the drill-out in #1 above). The signaling
packets bound for the destination follow the reverse route of the
registration-chain.

--=20
Saikat

--=-1d524/YXPQZ/1tx2NVlP
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQBFD4lwnFltqi691/oRAuNMAJ9fhNHY9AMnhJT/8bwebxQBdOwq1QCfSw2t
/+1Bb+3gRP7N/tjUa5fkeqU=
=8JGt
-----END PGP SIGNATURE-----

--=-1d524/YXPQZ/1tx2NVlP--



--===============0079520154==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof

--===============0079520154==--





From off-path-bof-bounces@ietf.org Tue Sep 19 03:40:46 2006
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
	by megatron.ietf.org with esmtp (Exim 4.43)
	id 1GPaDh-0005pF-Lr; Tue, 19 Sep 2006 03:40:41 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org)
	by megatron.ietf.org with esmtp (Exim 4.43) id 1GPaDg-0005mo-Fb
	for off-path-bof@ietf.org; Tue, 19 Sep 2006 03:40:40 -0400
Received: from szxga01-in.huawei.com ([61.144.161.53])
	by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPaDd-0001Vh-MF
	for off-path-bof@ietf.org; Tue, 19 Sep 2006 03:40:40 -0400
Received: from huawei.com (szxga01-in [172.24.2.3])
	by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTP id <0J5T002RIX2Q9L@szxga01-in.huawei.com> for
	off-path-bof@ietf.org; Tue, 19 Sep 2006 15:35:14 +0800 (CST)
Received: from huawei.com ([172.24.1.24])
	by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTP id <0J5T0035JX2Q3M@szxga01-in.huawei.com> for
	off-path-bof@ietf.org; Tue, 19 Sep 2006 15:35:14 +0800 (CST)
Received: from w52438 ([10.164.5.109])
	by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 1.25
	(built Mar
	3 2004)) with ESMTPA id <0J5T00036XHK4H@szxml04-in.huawei.com> for
	off-path-bof@ietf.org; Tue, 19 Sep 2006 15:44:12 +0800 (CST)
Date: Tue, 19 Sep 2006 15:31:21 +0800
From: Kylin Wei <weiqikun@huawei.com>
Subject: RE: [OFF-PATH-BOF] How does an endpoint discover a local policy
	byDHCP?
In-reply-to: <1158646129.2966.32.camel@localhost.localdomain>
To: 'Saikat Guha' <saikat@cs.cornell.edu>, 'Scott W Brim' <swb@employees.org>
Message-id: <000701c6dbbd$9a7f8c70$6d05a40a@china.huawei.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Office Outlook 11
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
Thread-index: AcbbshgAKBxv/zaTSZmKWs5KcI0TKQAC3KGw
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 0ddefe323dd869ab027dbfff7eff0465
Cc: off-path-bof@ietf.org
X-BeenThere: off-path-bof@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "BOF: Path-decoupled Signaling for Data" <off-path-bof.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/off-path-bof>
List-Post: <mailto:off-path-bof@ietf.org>
List-Help: <mailto:off-path-bof-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/off-path-bof>,
	<mailto:off-path-bof-request@ietf.org?subject=subscribe>
Errors-To: off-path-bof-bounces@ietf.org

Hi Saikat,

Thank you very much for your detailed introduction. 
I should say sorry because I make a mistake. My original question is "How
does an endpoint discover a local policy box by DHCP".

Kylin Wei 

> -----Original Message-----
> From: Saikat Guha [mailto:saikat@cs.cornell.edu]
> Sent: Tuesday, September 19, 2006 2:09 PM
> To: Scott W Brim
> Cc: off-path-bof@ietf.org
> Subject: Re: [OFF-PATH-BOF] How does an endpoint discover a local policy
> byDHCP?
> 
> On Mon, 2006-09-18 at 08:27 -0400, Scott W Brim wrote:
> > On 09/18/2006 07:18 AM, Paul Francis allegedly wrote:
> > > I don't think any of us envisioned that an endpoint would learn policy
via
> > > DHCP.
> >
> > Rather, a policy server?
> 
> If the question is how someone learns of which policy server to use ...
> 
> Signaling packets go 1) up, 2) across, and 3) down; and the next-hop
> policy server on each segment is determined differently.
> 
> 1) UP: Drilling out towards the Internet through multiple layers of
> firewalls ... a packet (any packet) is sent outwards, a firewall/M-Box
> intercepts it and responds with an ICMP-like error message that informs
> the source what policy server to contact for auth.
> 
> 2) ACROSS: Packet goes from internet-facing firewall of the stack of
> firewalls for the source to the internet-facing firewall of the
> recipient. The signaling server for the recipient's domain is resolved
> over DNS through SRV-type records.
> 
> 3) DOWN: Drilling down to the destination through multiple firewalls.
> When the destination registers its presence it creates a chain of
> registrations to the internet-facing signaling proxy for his domain
> (chain discovered through the drill-out in #1 above). The signaling
> packets bound for the destination follow the reverse route of the
> registration-chain.
> 
> --
> Saikat



_______________________________________________
OFF-PATH-BOF mailing list
OFF-PATH-BOF@ietf.org
https://www1.ietf.org/mailman/listinfo/off-path-bof



