Re: MOBIKE WG Agenda for IETF-64, take 1

Francis Dupont writes:
>    It may
>    require some preparation from you, however, such
>    as figuring out what the SCTP implementation situation
>    is or what issues are in providing additional IPsec/MOBIKE
>    support for SCTP.
>    
> => I prefer we get first feedback for RFC 3554 implementors:
> IMHO if nobody has implemented it and nobody cares, it is the
> sign the RFC 3554 way is wrong.

We have rfc3554 implemented, but I do not think any of our customers
actually uses it. Or at least none of the customers have ever
complained or questioned anything about it from our support people,
and that usually means that they are not using it at all.

Note also that RFC3554 had this wierd text that indicated that you
could actually use ID_LIST in the Phase 1 IDs too, and that is not
possible in the IKEv2. The ID payload of the IKEv2 is always single
identity, not a list. The traffic selectors used in the IPsec SAs are
lists so there should not be problem to use those in the SCTP.

The IKEv2 traffic selectors sent by the initiator must of course be
such that the responder can narrow the TSr to be his own set of
IP-addresses, i.e. the initiator sends TSi list with his own
addresses, and sends 0.0.0.0.-255.255.255.255 and
::-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF ip-adderess as TSr, so
responder can then narrow it down to his own set of IP-addresses.

I have not followed SCTP documents, but RFC3554 says that there
currently is no way to modify the addresses when they are in use. Does
anybody know if that has already changed, i.e. does the SCTP now
support changing the addresses while it is in use? At least there are
no RFCs yet about that.

Also the current SCTP model seems to be that it uses only the one
IP-address pair at time, and only uses the others when the primary
address pair is not working. This actually means that supporting that
in IKEv2/MOBIKE is quite simple, and only requires basic MOBIKE
abilities (i.e. the things we have in the draft now).
-- 
[email protected]