Subject: Re: [Mip6] Review of draft-giaretta-mip6-authorization-eap-02.txt

From: Francis Dupont <[email-masked]>
Date: Mon, 01 Nov 2004 19:00:27 +0100

In your previous mail you wrote:

   >BTW, do you think we need in the MN-AAA interface a mechanism to
   >negotiate the IKE version to be used between MN and HA?
   
   Hmm, not sure. What does IKE itself provide?

=> the right thing!

   If there's adequate support in
   IKE for version handling, then I think it isn't necessary. On the other
   hand, the HA might support both and might want to control which one is used
   by specific kinds of MNs.
   
   BTW, I believe many IKEv1 implementations also provide address assignment,
   though it is not part of the base specification.

=> this is worse than not to be a part: the extension was explicitly rejected
(not for itself but for its companion XAUTH).

   So just telling the MN to
   use IKE address assignment probably isn't enough to determine whether IKEv1
   or IKEv2 is used.
   
Regards

[email-masked]

_______________________________________________
Mip6 mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/mip6