Subject: [[email-masked]: Re: [Pana] [[email-masked]: draft-ietf-pana-statemachine-00 issue resolution list]]

From: Yoshihiro Ohba <[email-masked]>
Date: Wed, 06 Jul 2005 08:31:36 -0400

----- Forwarded message from Victor Fajardo <[email-masked]> -----

From: Victor Fajardo <[email-masked]>
Subject: Re: [Pana] [[email-masked]: draft-ietf-pana-statemachine-00
 issue resolution list]
To: Yoshihiro Ohba <[email-masked]>
Cc: [email-masked]

Hi Ohba,

>
>Issue #04
>---------
>
>The PANA_PROTECTION_CAPABILITY_UNSUPPORTED error code is not supported 
>in PaC and PAA FSM. This is mentioned in "Protocol Error Result Codes" 
>sec of pana-pana-08 as being sent by the PaC if it is unable to support 
>the PCAP.
>
>Current resolution:
>
>Un-resolved. Sec 4.3 of pana-pana-08 does not specify if this error 
>should be treated as fatal and hence terminate the session. Should 
>behavior be the same as PANA_PPAC_CAPABILITY_UNSUPPORTED as explicity 
>stated in Sec 4.3 of pana-pana-08 (the scenario is not expected to 
>change with pana-pana-09).
>  
>
Proposed resolution for issue #04:

All WAIT_EAP_RESULT state transitions should be modified to accomodate
PPAC verification. The following state transitions should be used:

- - - - - - - - - - - - - (EAP Result) - - - - - - - - - - - - -
EAP_SUCCESS && PBA.insert_avp("MAC"); OPEN
PBR.exist_avp PBA.insert_avp("Key-Id");
("Key-Id") && if (CARRY_DEVICE_ID)
ppac_available() && PBA.insert_avp
(!PBR.exist_avp ("Device-Id");
("Protection- PBA.insert_avp("PPAC");
Capability") || Tx:PBA();
(PBR.exist_avp Authorize();
("Protection- SessionTimerStart();
Capability") &&
pcap_supported()))

EAP_SUCCESS && if (key_available()) OPEN
!PBR.exist_avp PBA.insert_avp("MAC");
("Key-Id") && if (CARRY_DEVICE_ID)
ppac_available() && PBA.insert_avp
(!PBR.exist_avp ("Device-Id");
("Protection- PBA.insert_avp("PPAC");
Capability") || Tx:PBA();
(PBR.exist_avp Authorize();
("Protection- SessionTimerStart();
Capability") &&
pcap_supported()))

EAP_SUCCESS && if (key_available()) WAIT_PEA
!ppac_available() PER.insert_avp("MAC");
PER.RESULT_CODE=
PANA_PPAC_CAPABILITY_
UNSUPPORTED
Tx:PER();
RtxTimerStart();

EAP_SUCCESS && if (key_available()) WAIT_PEA
(PBR.exist_avp PER.insert_avp("MAC");
("Protection- PER.RESULT_CODE=
Capability") && PANA_PROTECTION_
!pcap_supported()) CAPABILITY_UNSUPPORTED
Tx:PER();
RtxTimerStart();

EAP_FAILURE && PBA.insert_avp("MAC"); OPEN
(SEPARATE==Set) && PBA.insert_avp("Key-Id");
PBR.exist_avp if (CARRY_DEVICE_ID)
("Key-Id") && PBA.insert_avp
ppac_available() && ("Device-Id");
(!PBR.exist_avp PBA.insert_avp("PPAC");
("Protection- Tx:PBA();
Capability") || Authorize();
(PBR.exist_avp SessionTimerStart();
("Protection-
Capability") &&
pcap_supported()))

EAP_FAILURE && if (key_available()) OPEN
(SEPARATE==Set) && PBA.insert_avp("MAC");
!PBR.exist_avp if (CARRY_DEVICE_ID)
("Key-Id") && PBA.insert_avp
ppac_available() && ("Device-Id");
(!PBR.exist_avp PBA.insert_avp("PPAC");
("Protection- Tx:PBA();
Capability") || Authorize();
(PBR.exist_avp SessionTimerStart();
("Protection-
Capability") &&
pcap_supported()))

EAP_FAILURE && if (key_available()) WAIT_PEA
(SEPARATE==Set) && PER.insert_avp("MAC");
!ppac_available() PER.RESULT_CODE=
PANA_PPAC_CAPABILITY_
UNSUPPORTED
Tx:PER();
RtxTimerStart();

EAP_FAILURE && if (key_available()) WAIT_PEA
(SEPARATE==Set) && PER.insert_avp("MAC");
(PBR.exist_avp PER.RESULT_CODE=
("Protection- PANA_PROTECTION_
Capability") && CAPABILITY_UNSUPPORTED
!pcap_supported()) Tx:PER();
RtxTimerStart();

EAP_INVALID_MSG None(); WAIT_PAA
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Regards,
-- victor fajardo

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

----- End forwarded message -----

_______________________________________________
Pana mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/pana