Internet DRAFT - draft-kniveton-nemo-prefix-delegation
draft-kniveton-nemo-prefix-delegation
Network Mobility T. Kniveton
Internet-Draft Nokia
Expires: January 18, 2006 P. Thubert
Cisco
July 17, 2005
Mobile Network Prefix Delegation
draft-kniveton-nemo-prefix-delegation-01
Status of this Memo
By submitting this Internet-Draft, each author represents that any
applicable patent or other IPR claims of which he or she is aware
have been or will be disclosed, and any of which he or she becomes
aware will be disclosed, in accordance with Section 6 of BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF), its areas, and its working groups. Note that
other groups may also distribute working documents as Internet-
Drafts.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
The list of current Internet-Drafts can be accessed at
http://www.ietf.org/ietf/1id-abstracts.txt.
The list of Internet-Draft Shadow Directories can be accessed at
http://www.ietf.org/shadow.html.
This Internet-Draft will expire on January 18, 2006.
Copyright Notice
Copyright (C) The Internet Society (2005).
Abstract
This paper extends the Nemo Basic Support [10] for a Mobile Router to
synchronize its Mobile Network Prefixes with its Home Agents and
obtain new ones dynamically. The proposed prefix delegation
mechanism is agnostic to the way the prefixes are managed and
provisioned at the Home Agent; it might be used for bootstrapping,
resynchronization at binding creation or after a loss of states (eg
MR reboot), MNP Renumbering, and configuration checking for loop
Kniveton & Thubert Expires January 18, 2006 [Page 1]
Internet-Draft NEMO-PD July 2005
avoidance.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Motivation for NEMO prefix delegation . . . . . . . . . . . . 3
2.1 Requirements . . . . . . . . . . . . . . . . . . . . . . . 4
2.2 Configuration Management . . . . . . . . . . . . . . . . . 4
2.3 Provisioning . . . . . . . . . . . . . . . . . . . . . . . 4
2.4 Renumbering . . . . . . . . . . . . . . . . . . . . . . . 5
2.5 The NEMO bootstrap problem . . . . . . . . . . . . . . . . 5
2.6 Local Mobility Management . . . . . . . . . . . . . . . . 5
3. Rationale . . . . . . . . . . . . . . . . . . . . . . . . . . 5
3.1 Which capabilities? . . . . . . . . . . . . . . . . . . . 6
3.1.1 Prefix Request capability . . . . . . . . . . . . . . 6
3.1.2 Full prefix list capability for HA . . . . . . . . . . 6
3.1.3 Full prefix list capability for MR . . . . . . . . . . 7
3.2 Rationale for New Binding Options . . . . . . . . . . . . 7
3.3 Rationale for a new bit in the BU . . . . . . . . . . . . 7
3.4 Why not Alternate Standard-based Solutions? . . . . . . . 7
4. Terminology and concepts . . . . . . . . . . . . . . . . . . . 9
5. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
5.1 New Mobility Headers . . . . . . . . . . . . . . . . . . . 10
5.2 New Prefix Status bit . . . . . . . . . . . . . . . . . . 10
5.3 Prefix Lease Duration . . . . . . . . . . . . . . . . . . 10
5.4 Protocol Flow . . . . . . . . . . . . . . . . . . . . . . 11
5.5 Renumbering . . . . . . . . . . . . . . . . . . . . . . . 12
5.6 Backward Compatibility . . . . . . . . . . . . . . . . . . 12
5.7 Basic PD flow . . . . . . . . . . . . . . . . . . . . . . 12
6. Message Formats . . . . . . . . . . . . . . . . . . . . . . . 13
6.1 Binding Update . . . . . . . . . . . . . . . . . . . . . . 13
6.2 Binding Acknowledgement . . . . . . . . . . . . . . . . . 14
6.3 Mobile Network Prefix option . . . . . . . . . . . . . . . 15
6.4 Mobile Network Prefix Request option . . . . . . . . . . . 16
6.5 Mobile Network Prefix Confirmation option . . . . . . . . 18
7. Mobile Router Operation . . . . . . . . . . . . . . . . . . . 21
8. Home Agent Operation . . . . . . . . . . . . . . . . . . . . . 22
9. Back End considerations . . . . . . . . . . . . . . . . . . . 23
10. Security Considerations . . . . . . . . . . . . . . . . . . 24
11. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 24
12. References . . . . . . . . . . . . . . . . . . . . . . . . . 25
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . 26
Intellectual Property and Copyright Statements . . . . . . . . 27
Kniveton & Thubert Expires January 18, 2006 [Page 2]
Internet-Draft NEMO-PD July 2005
1. Introduction
The reader of that document is expected to be familiar with both the
Mobile IPv6 [8] and NEMO Basic Support [10] documents. As such, it
is well understood that neither protocol provides the means for
provisioning the Mobile Nodes and Routers with essential parameters
such as Home Address and Home Network.
The process by which a router obtains a prefix dynamically is called
prefix delegation. In the NEMO context, the prefix assignment is
managed by an authority in the Home Network and divides it into
subnets for MNPs, which are then assigned to the MRs. An MNP can be
preassigned to the associated MR (e.g. manually or automatically with
a provisionning system), or assigned dynamically by a server such as
a DHCP Prefix Delegation server.
As prescribed by [10], the HA checks whether a MR is authorized for
the MNPs it claims as part of the NEMO Binding Update with the
explicit prefix option. Also, MNPs have to belong to an aggregation
that is permanently advertised be the HA to the routing
infrastruture. Consequently, there is a strong relationship between
the HA that the MR registers to and the prefixes it claims with the
registration, and it makes sense for the HA to participate actively
to the delegation process as well.
[10] standardizes an interface between a Mobile Router and its Home
Agent, as well as an interface between Home Agents. The protocol is
agnostic as to how the back-end is implemented in terms of AAA,
provisioning, or routing between the HAs and their IGP, and enables
various forms of deployment, as described in [11].
In the same fashion, the document extends [10] for a Mobile Router to
obtain its Mobile Network Prefix dynamically from its Home Agent,
with no assumption about the specific back-end implementation for
prefix management and service authorization.
2. Motivation for NEMO prefix delegation
A number of reasons motivate adding this capability to NEMO Basic
Support [10].
Mainly, there is an unanswered question as to how a MR could be
dynamically assigned its prefix. In a situation where a site has
many MRs, it may be impractical to assign the prefixes statically in
the non-volatile memory of the MR. Consequently, we would like a
mechanism for the HA to assign the prefix, similar to how a MN can
bootstrap its Home Address.
Kniveton & Thubert Expires January 18, 2006 [Page 3]
Internet-Draft NEMO-PD July 2005
2.1 Requirements
There is thus a need for a Mobile Router to obtain dynamically one or
more MNPs, linked to the HA that the MR binds with.
Since the process might be used as part of a mobility scenario, there
is also a need to optimize the delegation flow by limiting the number
of protocol exchanges that take place for delegation and
registration.
Since the initial configuration may be erroneous or may need to
evolve overtime, there is a need to manage the MNPs on a Mobile
Router. This includes initial setting up, and synchronizing
overtime.
2.2 Configuration Management
The Implicit Mode of NEMO 'externalizes' the configuration of the
MNPs in a MR and its HA. In the example of a static configuration,
both side are initially provisioned with the association between the
MRs and their MNPs, and maintain matching states between them.
The failure to configure and maintain these matching states, over
time, ends up in routing loops and unreachable prefixes. Tools for
synchronizing MNPs in the runtime environment would be a valuable
addition to [10].
2.3 Provisioning
In practice, provisioning both sides manually is error-prone and
should be avoided. It can not be taken for granted, either, that in
all cases, a provisioning system can be deployed with the capability
to configure both the Mobile Router and the back-end in a
transactional manner.
Consequently, it appears necessary to provide a way to configure one
side only, and have the other side learn from it in a trusted fashion
and with no additional manual intervention.
The Explicit Prefix mode enables a flow where the configuration of
that association is not centralized at the HA but distributed to all
the MRs. In fact, the HA is required to validate that the MR has
been authorized for the MNPs it claims and then again, some level of
information duplication might occur.
In the general case, it may be easier to manage the prefix
attribution in a centralized manner and have the MRs learn their
prefixes dynamically.
Kniveton & Thubert Expires January 18, 2006 [Page 4]
Internet-Draft NEMO-PD July 2005
2.4 Renumbering
The concept of lifetime is one core idea with IPv6. Nothing is
eternal. Overtime, it might be desirable to modify the configuration
of the MNPs. This task, called renumbering, is especially difficult
for Mobile Routers when they are geographically distributed and not
be readily available to the administrators.
It is thus desirable to extend [10] with a renumbering mechanism. In
particular, it makes sense to provide that extension within the
prefix delegation mechanism, since the operations that take place are
vastly similar.
2.5 The NEMO bootstrap problem
Nemo basic support expects a Mobile router to be provisioned with
some information in order to start up - Home Network or Home Agent
address, Home Address, Mobile Network Prefixes, security tokens,
etc...
In some situations, it may be impractical to actually provision all
this information into the router at deployment time, and some of it
has to be obtained dynamically when a system boots up, possibly
through manually keying by the final user.
It is absolutely required to reduce such manual keying of information
to the bare minimum, like a user ID and password. And while NEMO can
benefit from the MIP6 effort on the bootstrap problem (as described
in the MIP6 bootstrap problem statement document [9]) for most
parameters, the dynamic provisionning of Mobile Network Prefix(es) is
not considered by MIPv6.
2.6 Local Mobility Management
In turn, the bootstrap problem is linked to the Local Mobility
Management problem; some LMM solutions such as HMIP deploy regional
Home Agents from which bootstrap information has to be obtained when
moving into their area of coverage; as opposed to the initial
bootstrap problem which occurs at the first startup of a device and
may not happen again for an extensive period of time, LMM is tied to
movement, and could be quite frequent.
3. Rationale
This section details the rationale behind some of the design
decisions that lead to this solution.
Kniveton & Thubert Expires January 18, 2006 [Page 5]
Internet-Draft NEMO-PD July 2005
3.1 Which capabilities?
3.1.1 Prefix Request capability
The minimum capability that could be envisionned for a NEMO Prefix
Delegation mechanism is for a MR to request a new prefix in a Binding
Update and for the HA to provide the prefix as part of the Binding
Acknowledgement. Then the Mobile Router installs the newly obtained
prefix on the interface that needs it, and moves forward in implicit
or explicit mode.
3.1.2 Full prefix list capability for HA
The capability to request a new prefix is sufficient in a basic
delegation flow where a MR that is already bound and -hopefully-
synchronized with its HA in terms of prefix ownership; it is also
required in some bootstrapping and renumbering flows; but it is
hardly sufficient in order to synchronize the MR and the HA states
regarding MNPs:
Bootstrapping: At bootstrapping time, the MR needs the list of all
the prefixes that are attributed in order to populate its
interfaces. Asking them one by one and having to make a
distinction between already allocated prefixes versus dynamic
allocation would make the flow much more complex.
Expired prefixes: That list is also needed for a MR in order to
synchronize its current configuration with that of the HA. In
particular, it is used for a MR to discover when the HA does not
have the associated states in place for one of its MNPs. This may
happen for some configuration error or because the prefix has
expired, and the only way to know is if the prefix is missing in a
full list of all prefixes by the HA.
Newly allocated prefixes: Finally, the list is needed for a MR to
learn new prefixes that would be attributed in runtime, and to
install those prefixes on its interfaces. Once the new prefixes
are installed, it is required that the MR confirms its use of the
prefixes so that the HA can set up routing in a loopfree fashion.
So, the capability for a HA to list all the prefixes for a MR is
needed for the MR to realize that the HA is missing some state and
eventually to try to get the missing prefixes in explicit mode. This
may happen on demand by the MR (e.g. at bootstrap time or binding
creation time), or whenever the HA needs to communicate a change,
such as a shortened or expired MNP lifetime.
Kniveton & Thubert Expires January 18, 2006 [Page 6]
Internet-Draft NEMO-PD July 2005
3.1.3 Full prefix list capability for MR
So the capability for a HA to list all the prefixes is not
sufficient, as the HA is not the repository of that knowledge. It
might be simpler for the MR to dump its own list of prefixes and have
the HA check the list, even for implicit prefixes.
3.2 Rationale for New Binding Options
Associated with the capability to request a new prefix, it seems
relevant to specify whether the prefix is for implicit or explicit
mode, or if its lifetime is limited to that of the binding cache or
not. Other fields such as the prefix length are needed as well. In
order to convey that information, an optional field is needed in the
BU.
It is not desirable to extend the existing NEMO MNP option, which
carries a prefix that is not needed. As a result, we propose a new
option type, the MNP Request Option.
Associated with the capability for a HA to list all the prefixes for
a MR, one critical piece of information is needed that would not fit
in the NEMO MNP option. Again, we propose a new option for the
Binding Acknowledgement, the MNP Confirmation Option.
3.3 Rationale for a new bit in the BU
A single bit in the BU is enough for a MR to request a full list of
prefixes from the HA, if we do not need a filter of any sort?
It is important that the HA set that bit in its full list of prefixes
in order to differentiate between an empty list (there is no prefix
for that MR) and no list (HA is not providing a list in that BA).
3.4 Why not Alternate Standard-based Solutions?
Proposing a new, specific solution might seem irrelevant when a
standard, generic mechanism already exists: in this case, the DHCPv6
Prefix Delegation. In fact, it is possible for the Home Agent to
act as a DHCPv6PD Delegating Router. This solution presents the
advantage of reusing existing standard flows from RFC3633 [6].
Yet, in a deployment where the MNPs are preassigned to the MR, a AAA
server, interfacing with the HA, and eventually coupled with a
provisioning system in its back-end, can provide the required service
for assigning and authorizing the prefixes to the MRs; in such a
case, the value of implementing a DHCPv6PD server is highly arguable.
It is more generic to let the HA handle the backend interfaces on
Kniveton & Thubert Expires January 18, 2006 [Page 7]
Internet-Draft NEMO-PD July 2005
behalf of the MR and expose a consistent NEMO interface for all
deployments.
In more detail, a DHCPv6PD based solution presents a number of
inconveniences:
Delegating Router: A collocated Delegating Router function may not
be available for all implementation of NEMO Home Agent. In
particular, some implementations are server based.
Operational overhead: Depending on the mechanism that is used to
attribute the MNPs to the MRs, the Delegating function, even if
available, might be a costly overhead. Rather, an embedded, back-
end agnostic flow might be a desirable option.
Movement overhead: Some flows, for instance local mobility
management, might require a prefix delegation as part of the
handling of the movement. Segregating the delegation from the
binding adds a round trip delay to the recovery from the movement.
Binding Lifetime: It might be useful to associate implicitly the
lifetime of a delegated prefix with that of the binding. This
pleads for a design that places the Home Agent function in the
flow by construction.
Authentication Mechanism: While NEMO basic Support protects its own
flows, there is no mandate to secure the tunneled packets.
Back-end interaction: If a prefix is attributed to a MR for a
duration that exceeds that of its binding, this information needs
to be shared with all HAs, at least for authorization purposes.
This requires a specific backend integration that does not exist
in the Prefix Delegation Function, for instance via a AAA server.
Kniveton & Thubert Expires January 18, 2006 [Page 8]
Internet-Draft NEMO-PD July 2005
4. Terminology and concepts
The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD,
SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL in this document are to be
interpreted as described in RFC2119 [1].
Most of the mobility related terms used in this document are defined
in the Mobility Related Terminology document [7] and in the Mobile
IPv6 specification [8].
Additionally, some terms were created or extended for NEMO. These
specific terms are defined in the Mobile Network Terminology document
[12]
This draft introduces the following definitions:
Mobile Network Prefix Request (MNPReq) Option: A new optional field
in the MIPv6 Mobility Header for use with the Binding Update
message, as described further in this document. This field is set
by a MR to request the delegation of a new prefix as a Mobile
Network Prefix.
Mobile Network Prefix Confirmation (MNPConf) Option: A new optional
field in the MIP6 Mobility Header for use with the Binding
Acknowledgement message, as described further in this document.
transient prefix: A prefix that is attributed to a Mobile Router in
association with a binding cache entry. If the BCE is removed,
the prefix is freed.
Persistent prefix: A prefix that is attributed to a Mobile Router for
a period of time that does not depend on the existence of a
binding cache entry.
Kniveton & Thubert Expires January 18, 2006 [Page 9]
Internet-Draft NEMO-PD July 2005
5. Overview
5.1 New Mobility Headers
This paper introduces a new option to the MIP6 Mobility Header, for
use with the Binding Update message, the Mobile Network Prefix
Request Option. A MR may include one or more MNPReq option(s) in a
Binding Update message at any time, in order to obtain additional
prefixes.
This paper introduces another new option to the MIP6 Mobility Header,
for use with the Binding Acknowledgement message, the Mobile Network
Prefix Confirmation Option. An HA will include one or more MNPConf
option(s) in a Binding Acknowledgement message, either in response to
a Mobile Network Prefix Request Option, or for its own purposes, for
instance in order inform a MR about a change in the lifetime of an
MNP.
5.2 New Prefix Status bit
Finally, this paper introduces a new bit to both the MIP6 Binding
Update and Binding Acknowledgement, the Prefix Status bit. A MR may
include the Prefix Status bit in a Binding Update message at any
time, either in order to get its initial configuration, or to check
whether its current configuration matches that of the Home Agent -
which might be particularily useful in implicit mode. When the
Prefix Status bit is set in the BU, the Acknowledge bit MUST be set
as well.
The HA MAY set the Prefix Status bit in the Binding Acknowledgement
even if it was not set by the MR in the Binding Update; the other way
around, if the Prefix Status bit was set in the BU, then the HA MUST
echo it in the BA. When setting the Prefix Status bit, the HA also
lists all the prefixes associated to that Mobile Router using Mobile
Network Prefix Confirmation options.
5.3 Prefix Lease Duration
A prefix may be obtained for the duration of the binding; in this
case, the prefix is called 'transient'. On the other hand, a prefix
can be assigned to a MR for a duration that is independent of a BCE
lifecycle, and that is controlled externally by the HA administrator;
in that case, the prefix is called 'persistent'.
A flag in the MNPReq option indicates the expectation of the MR in
terms of persistence for the requested prefix. If the HA can not
fulfill that expectation, it must reject the binding with a negative
status.
Kniveton & Thubert Expires January 18, 2006 [Page 10]
Internet-Draft NEMO-PD July 2005
The lease of a transient prefix expires with the MR Binding Cache
Entry; as a result, transient prefixes can be managed internally by a
HA, for instance using a local pool that forms an aggregation owned
by the HA.
On the other hand, some of the information about a persistent prefix
has to be shared between the HAs in a Home Network and the back-end
systems that enable the authorization. This is required to allow a
Mobile Router to rebind, with the same persistent prefixes, to a
different Home Agent, after a period of inactivity.
It is possible to assign a persistent prefix dynamically at the time
of the delegation; but the persistent mode also enables the
preassignment of an MNP to an MR, for instance by provisionning a AAA
server with the necessary information for each Mobile Router.
5.4 Protocol Flow
The operation of prefix delegation has a slightly different semantic
than home address delegation under Mobile IPv6. If the HA or another
router allowed the routing for an address to be changed, the worst
possible effect would be unauthorized access, and possibly stealing a
message flow from one node. So we protect against this using reverse
routability.
On the other hand, if the routing for an entire prefix were changed
in a malevolent manner, traffic for a large portion of a site could
be lost or redirected. Therefore, it is important to focus more
closely on exactly how the authorization works for delegating that
prefix.
There is a 4-step flow for dynamic prefix delegation that must be
followed:
1. Provisioning -- The administrative entity managing the address
space for a site must allocate, either manually or automatically,
a prefix to be used by the MR. This could be done when the MR's
account with HoA and security association is established, or it
could be done at the time of the delegation request.
This provisioning must be stored in some permanent location
accessible by the HA, since it is necessary to verify autorization
for an MR to use a MNP.
2. Request -- The MR must signal that it would like a prefix to be
delegated by the HA.
Kniveton & Thubert Expires January 18, 2006 [Page 11]
Internet-Draft NEMO-PD July 2005
3. Authorization -- The HA must check that the MR is allowed to use a
certain prefix. At this point, the HA does a lookup operation, or
if this is a dynamic prefix that has not yet been allocated, the
HA does step (1) and provisions a prefix for a certain time
period.
4. Delegation -- The HA signals to the MR that it is authorized to
use a certain prefix for a certain period of time. For
simplicity, it should be assumed that this lifetime is the length
of the MR's binding, since it is not useful for the MR to continue
to have a binding if its MNP has expired. It is possible the
lifetime is longer (i.e. infinity if it is a (statically
provisioned) persistent prefix).
5.5 Renumbering
It is possible to redeploy the persistent prefix space, for instance
if Home is being renumbered, or if a dynamically attributed prefix
has not been bound for a long period of time. In that case, the HA
rejects a new binding as the routing states can not be set up, and
the MR has to request one or more new persistent prefix(es).
5.6 Backward Compatibility
An HA that does not support this extension will ignore the
unrecognized option. If the HA supports this extension, a binding
update with the MNPReq option can be accepted per the NEMO basic
support checks: after the packet is checked according to the NEMO
spec, the HA processes the option(s).
5.7 Basic PD flow
When a MR needs an additional prefix to populate an interface, it
adds an MNPreq option to its Binding update message.
If the HA can obtain the required prefix for that MR, it operates
following the NEMO basic support, in either Implicit Mode or Explicit
Mode, using the prefixes as if they were received with the BU. This
includes setting up the routing states and responding with a positive
or a negative status.
If the routing states are established correctly and the HA responds
with a positive status, then the HA adds the prefix list to the
binding ack message.
From that point on, both the MR and the HA operate as prescribed by
the NEMO basic standard, either in implicit or explicit mode.
Kniveton & Thubert Expires January 18, 2006 [Page 12]
Internet-Draft NEMO-PD July 2005
6. Message Formats
6.1 Binding Update
A new flag (S) is included in the Binding Update to indicate to the
Home Agent that the MR wishes to get the full list of all prefixes
that are already assigned to it. The rest of the Binding Update
format remains the same as defined in [10].
When the (S) bit is set, the (R) and and (A) bits MUST be set as
well.
2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Sequence # |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|A|H|L|K|M|R|S| Reserved | Lifetime |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
. .
. Mobility options .
. .
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Prefix Status (S) The Prefix Status (S) bit is set by a MR to request
the full list of all prefixes that are already assigned to it
Kniveton & Thubert Expires January 18, 2006 [Page 13]
Internet-Draft NEMO-PD July 2005
6.2 Binding Acknowledgement
A new flag (S) is included in the Binding Acknowledgement to indicate
to the Mobile Router that the Home Agent is providing the complete
list of prefixes that are already assigned to the MR. The rest of
the Binding Acknowledgement format remains the same as defined in
[10].
When the (S) bit is set, the (R) bit MUST be set as well.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Status |K|R|S|Reserved |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Sequence # | Lifetime |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
. .
. Mobility options .
. .
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Prefix Status (S) The Prefix Status (S) bit is set by a HA to
indicate that it provides the full list of all prefixes that are
already assigned to the MR.
Kniveton & Thubert Expires January 18, 2006 [Page 14]
Internet-Draft NEMO-PD July 2005
6.3 Mobile Network Prefix option
New flags are included in the Mobile Network Prefix option defined in
[10]. This allows the option to cover all the prefixes owned by the
MR, including those that are managed using the implicit prefix mode.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length |P|I|D|Reserved1| Prefix Length |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+ +
| |
+ Mobile Network Prefix +
| |
+ +
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The new flags introduced by this specification are:
Persistent (P) The (P) bit is set if the prefix is expected to be
persistently assigned to the MR beyond the lifetime of the
associated binding.
Implicit (I) The (I) bit is set if the prefix is expected to be
assigned to and routed via the MR even if the prefix is not listed
in an explicit mode BU.
Delegated (D) The (D) bit is set if the prefix was obtained using the
Delegation Mechanism as described in this specification. It is
used to acknowledge that a previously delegated prefix is actually
installed and routable via the Mobile Router.
Alignment: Must be 8n + 4.
Kniveton & Thubert Expires January 18, 2006 [Page 15]
Internet-Draft NEMO-PD July 2005
6.4 Mobile Network Prefix Request option
This new option is included in the Binding Update to indicate to the
Home Agent that the MR wishes to get a new prefix assigned to it for
use as a MNP.
When this option is present, the (S) MAY be set as well in the BU in
order to get the full list of all prefixes.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Prefix Length |P|I| Reserved1 |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| CorID | Reserved2 | Prefix type |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Type: TBA
Length: 8-bit unsigned integer indicating the length in octets of the
option excluding the type and length fields. Set to 6.
Prefix Length: 8-bit unsigned integer indicating the prefix length of
the IPv6 prefix contained in the option (valid range isno
1..128).
Persistent (P): The (P) bit is set if the prefix that is requested to
be persistently assigned to the MR.
Implicit (I): The (I) bit is set if the prefix that is requested to
be assigned to, and routed via the MR, even if the prefix was not
listed in an explicit mode BU.
CorId: A Correlator that is set by the MR in order to associate a MNP
request with the prefix given in the confirmation. There can be
at most one active prefix associated with each Correlator. This
mechanism ensures the uniqueness of the allocation of a prefix,
should either the BU or the BA be lost in transit.
Prefix Type: Indicates the type of prefix that is requested:
Kniveton & Thubert Expires January 18, 2006 [Page 16]
Internet-Draft NEMO-PD July 2005
0: None Specified
1: Private
2: Unique Local
3: Global
Kniveton & Thubert Expires January 18, 2006 [Page 17]
Internet-Draft NEMO-PD July 2005
6.5 Mobile Network Prefix Confirmation option
This new option is included in the Binding Acknowledgment to indicate
to the Mobile Router whether a new prefix was assigned, and what it
is.
When this option is present, the (S) MAY be set as well in the BU in
order to indicate that the complete list of prefixes is attached.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Prefix Length |P|I|D|Reserved1|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| CorID | Status | Prefix type |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Valid Lifetime |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+ +
| |
+ Mobile Network Prefix +
| |
+ +
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Type TBA
Length: 8-bit unsigned integer indicating the length in octets of the
option excluding the type and length fields. Set to 26.
Prefix Length: 8-bit unsigned integer indicating the length of the
IPv6 prefix contained in the option (valid range is 1..128).
Persistent (P): The (P) bit is set if the prefix is persistently
assigned to the MR.
Implicit (I): The (I) bit is set if the prefix is assigned to and
routed via the MR even if the prefix is not listed in explicit
mode BU.
Kniveton & Thubert Expires January 18, 2006 [Page 18]
Internet-Draft NEMO-PD July 2005
Delegated (D): The (D) bit is set if the prefix was obtained using a
the Delegation Mechanism described in this specification.
CorId: If the (D) bit is set, this option contains the prefix being
delegated in response to the MNPReq containing the same Correlator
If the (D) bit is not set, the Correlator value is unused.
Status: Indicates what happened in response to the corresponding
request:
0: OK (Route successfully created for designated prefix)
1: Prefix is not currently registered
2: Mobile Network Option sent from non-MR
3: Invalid prefix (not part of valid address space)
4: Prefix not owned by this domain/link (HA can not delegate)
5: Prefix not owned by MR which sent this MNO
6: Could not create route / insufficient resources
7: Policy does not allow allocation of PrefixLen. Prefix
allocated as shown, with longer prefixlen.
8: Persistent prefixes are not supported.
9: Transient prefixes are not supported.
10: NEMO Implicit mode is not supported.
Prefix Type: Indicates the type of prefix enclosed:
0: None Specified
1: Private
2: Unique Local
3: Global
Valid Lifetime: 32-bit unsigned integer. The length of time in
seconds (relative to the time the packet is sent) that the prefix
is valid for being installed on an MR ingress interface. A value
of all one bits (0xffffffff) represents infinity. The Valid
Lifetime is also used by RFC2461 [3] and RFC2462 [4], and must be
Kniveton & Thubert Expires January 18, 2006 [Page 19]
Internet-Draft NEMO-PD July 2005
used in the RAs sent over the MR ingress interface for that
prefix.
Mobile Network Prefix: A 16 byte field containing the Mobile Network
Prefix.
Kniveton & Thubert Expires January 18, 2006 [Page 20]
Internet-Draft NEMO-PD July 2005
7. Mobile Router Operation
When the Mobile Router has determined the Home Address it is going to
use and the Home Agent it is going to register with, it constructs a
Binding Update with the R bit set. At this time, the Mobile Router
will add either a MNP Option, or a MNPReq Option, or both, to the BU.
If the Mobile Router already has one or more persistent MNPs and does
not need more, it simply adds a MNP Option. If the MR is not pre-
configured with a persistent prefix, it may request either a
persistent or transient prefix.
If more than one prefix is needed, than more than one can be
requested by simply appending multiple MNPReq Options to the BU.
When the Binding Acknowledgment is received back from the HA, the MR
will process it as normal, and when the MNPC Option(s) are
encountered, it should verify that it sent a request using the
included CorID, and then react according to the status field, as
follows:
0: Begin forwarding this prefix and using it in Router Advertisements
as described in NEMO. If the P bit is set and the MR supports
persisten prefixes, add it to the list of prefixes.
1: (unknown)
2: Contact system administrator.
3: MR may try again with a different prefix.
4: MR may try dynamic home agent discovery to contact correct HA.
5: MR should retry, with P bit turned off, to obtain a transient
prefix.
6: MR should try another HA, or wait and try again later.
7: Same response as for status 0.
Kniveton & Thubert Expires January 18, 2006 [Page 21]
Internet-Draft NEMO-PD July 2005
8. Home Agent Operation
The Home Agent receives a Binding Update from the Mobile Router, it
processes the BU as described in the Mobile IPv6 protocol [8] and
NEMO basic support [10]. When it arrives at a MNPO (assuming the
Binding Update is valid as already processed), it takes steps as
follows:
Step 1. Verify that the MR is allowed to be allocated a prefix of the
requested type and allocate one.
Step 2. If the request is for a persistent prefix, save the
allocation in the back-end permanent store.
Step 3. Set up routing for this prefix. If the BU was of lifetime 0,
do not set up routing for this prefix, but simply allocate it.
Step 4. For each MNPR option, respond with a MNPC option in the BAck.
If the MNPR was received in a BU from a non-MR, send status 2 and
0s for prefix information. Otherwise, send a response with result
code 0, and filling in the appropriate prefix information.
If the Binding Update contains an S bit, the Home Agent includes a
Mobile Network Prefix Option for each prefix the Home Agent believes
is assigned to the Mobile Router.
After these steps are followed, the Home Agent continues its
operation as normal, until another MNPO or MNPR is received.
Kniveton & Thubert Expires January 18, 2006 [Page 22]
Internet-Draft NEMO-PD July 2005
9. Back End considerations
Kniveton & Thubert Expires January 18, 2006 [Page 23]
Internet-Draft NEMO-PD July 2005
10. Security Considerations
11. Acknowledgements
The authors wish to thank:
Pekka Paakkonen and Juhani Latvakoski from VTT Electronics for their
initial work on the matter.
Kniveton & Thubert Expires January 18, 2006 [Page 24]
Internet-Draft NEMO-PD July 2005
12. References
[1] Bradner, S., "Key words for use in RFCs to Indicate Requirement
Levels", BCP 14, RFC 2119, March 1997.
[2] Deering, S. and R. Hinden, "Internet Protocol, Version 6 (IPv6)
Specification", RFC 2460, December 1998.
[3] Narten, T., Nordmark, E., and W. Simpson, "Neighbor Discovery
for IP Version 6 (IPv6)", RFC 2461, December 1998.
[4] Thomson, S. and T. Narten, "IPv6 Stateless Address
Autoconfiguration", RFC 2462, December 1998.
[5] Hinden, R. and S. Deering, "Internet Protocol Version 6 (IPv6)
Addressing Architecture", RFC 3513, April 2003.
[6] Troan, O. and R. Droms, "IPv6 Prefix Options for Dynamic Host
Configuration Protocol (DHCP) version 6", RFC 3633,
December 2003.
[7] Manner, J. and M. Kojo, "Mobility Related Terminology",
RFC 3753, June 2004.
[8] Johnson, D., Perkins, C., and J. Arkko, "Mobility Support in
IPv6", RFC 3775, June 2004.
[9] Patel, A., "Problem Statement for bootstrapping Mobile IPv6",
draft-ietf-mip6-bootstrap-ps-00 (work in progress), July 2004.
[10] Devarapalli, V., Wakikawa, R., Petrescu, A., and P. Thubert,
"Network Mobility (NEMO) Basic Support Protocol", RFC 3963,
January 2005.
[11] Thubert, P., Wakikawa, R., and V. Devarapalli, "NEMO Home
Network models", draft-ietf-nemo-home-network-models-00 (work
in progress), April 2004.
[12] Ernst, T. and H. Lach, "Network Mobility Support Terminology",
draft-ietf-nemo-terminology-01 (work in progress),
February 2004.
Kniveton & Thubert Expires January 18, 2006 [Page 25]
Internet-Draft NEMO-PD July 2005
Authors' Addresses
T.J. Kniveton
Nokia, Inc.
313 Fairchild Dr.
Building B-223
Mountain View 94043
USA
Phone: +1 650 625 2025
Email: tj@kniveton.com
Pascal Thubert
Cisco Systems
Village d'Entreprises Green Side
400, Avenue de Roumanille
Batiment T3
Biot - Sophia Antipolis 06410
FRANCE
Phone: +33 4 97 23 26 34
Email: pthubert@cisco.com
Kniveton & Thubert Expires January 18, 2006 [Page 26]
Internet-Draft NEMO-PD July 2005
Intellectual Property Statement
The IETF takes no position regarding the validity or scope of any
Intellectual Property Rights or other rights that might be claimed to
pertain to the implementation or use of the technology described in
this document or the extent to which any license under such rights
might or might not be available; nor does it represent that it has
made any independent effort to identify any such rights. Information
on the procedures with respect to rights in RFC documents can be
found in BCP 78 and BCP 79.
Copies of IPR disclosures made to the IETF Secretariat and any
assurances of licenses to be made available, or the result of an
attempt made to obtain a general license or permission for the use of
such proprietary rights by implementers or users of this
specification can be obtained from the IETF on-line IPR repository at
http://www.ietf.org/ipr.
The IETF invites any interested party to bring to its attention any
copyrights, patents or patent applications, or other proprietary
rights that may cover technology that may be required to implement
this standard. Please address the information to the IETF at
ietf-ipr@ietf.org.
Disclaimer of Validity
This document and the information contained herein are provided on an
"AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Copyright Statement
Copyright (C) The Internet Society (2005). This document is subject
to the rights, licenses and restrictions contained in BCP 78, and
except as set forth therein, the authors retain all their rights.
Acknowledgment
Funding for the RFC Editor function is currently provided by the
Internet Society.
Kniveton & Thubert Expires January 18, 2006 [Page 27]
