Subject: [Pana] Re: Re-Auth from PAA

From: Yoshihiro Ohba <[email-masked]>
Date: Tue, 04 Sep 2007 03:55:32 -0400

Esaka-san,

Thank you for pointing this out.

The answer is that the sequence you indicated below is not expected,
i.e., in re-authentication phase, PAA should not send re-auth request
prior to PAR since it's just redundant.

To avoid confusion, I'd suggest revising Section 7.6 as follows:

"
7.6.  PANA-Notification-Request (PNR)

The PANA-Notification-Request (PNR) message is used for signaling
re-authentication and performing liveness test.  See Section 4.3 
and Section 4.2 for details on re-authentication and liveness test, 
respectively.
"

Best Regards,
Yoshihiro Ohba

On Tue, Sep 04, 2007 at 03:17:05PM +0900, Naoki Esaka wrote:
> 
> 4.3 Re-authentication Phase says:
> 
>   4.3.  Re-authentication Phase
>   ...
>      When the PAA initiates re-authentication, it sends a
>      PANA-Auth-Request message containing the session identifier for  
> the
>      PaC.  The PAA MUST initiate EAP re-authentication before the  
> current
>      session lifetime expires.
> 
> so, it's natural to send PAR from PAA when Re-Auth triggered.
> However 7.6 PANA-Notification-Request(PNR) says:
> 
>   7.6.  PANA-Notification-Request (PNR)
> 
>      The PANA-Notification-Request (PNR) message is sent either by  
> the PaC
>      or the PAA for signaling re-authentication and performing liveness
>      test.
> 
> It implies following sequence is also OK:
> 
>   PaC      PAA
>    access phase
>      <-----     PANA-Notification-Request(PNR) 'A'
>      ----->     PANA-Notification-Answer(PNA) 'A'
>      <-----     PANA-Auth-Request(PAR)
>      ----->     PANA-Auth-Answer(PAN)
>      ...
> 
> Is this what pana-18a expects?  Should we support
> both cases?
> --
> Naoki
> 
> 

_______________________________________________
Pana mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/pana