datatracker.ietf.org
Sign in
Version 5.4.0, 2014-04-22
Report a bug

Protocol for Carrying Authentication for Network Access (PANA)
RFC 5191

Document type: RFC - Proposed Standard (May 2008; Errata)
Updated by RFC 5872
Document stream: IETF
Last updated: 2013-03-02
Other versions: plain text, pdf, html

IETF State: (None)
Consensus: Unknown
Document shepherd: No shepherd assigned

IESG State: RFC 5191 (Proposed Standard)
Responsible AD: Mark Townsley
Send notices to: basavaraj.patil@nokia.com, alper.yegin@samsung.com

Network Working Group                                        D. Forsberg
Request for Comments: 5191                                         Nokia
Category: Standards Track                                   Y. Ohba, Ed.
                                                                 Toshiba
                                                                B. Patil
                                                           H. Tschofenig
                                                  Nokia Siemens Networks
                                                                A. Yegin
                                                                 Samsung
                                                                May 2008

     Protocol for Carrying Authentication for Network Access (PANA)

Status of This Memo

   This document specifies an Internet standards track protocol for the
   Internet community, and requests discussion and suggestions for
   improvements.  Please refer to the current edition of the "Internet
   Official Protocol Standards" (STD 1) for the standardization state
   and status of this protocol.  Distribution of this memo is unlimited.

Abstract

   This document defines the Protocol for Carrying Authentication for
   Network Access (PANA), a network-layer transport for Extensible
   Authentication Protocol (EAP) to enable network access authentication
   between clients and access networks.  In EAP terms, PANA is a
   UDP-based EAP lower layer that runs between the EAP peer and the EAP
   authenticator.

Forsberg, et al.            Standards Track                     [Page 1]
RFC 5191                          PANA                          May 2008

Table of Contents

   1. Introduction ....................................................3
      1.1. Specification of Requirements ..............................4
   2. Terminology .....................................................4
   3. Protocol Overview ...............................................6
   4. Protocol Details ................................................7
      4.1. Authentication and Authorization Phase .....................7
      4.2. Access Phase ..............................................11
      4.3. Re-Authentication Phase ...................................11
      4.4. Termination Phase .........................................13
   5. Processing Rules ...............................................13
      5.1. Fragmentation .............................................13
      5.2. Sequence Number and Retransmission ........................14
      5.3. PANA Security Association .................................15
      5.4. Message Authentication ....................................17
      5.5. Message Validity Check ....................................17
      5.6. PaC Updating Its IP Address ...............................19
      5.7. Session Lifetime ..........................................19
   6. Message Format .................................................20
      6.1. IP and UDP Headers ........................................20
      6.2. PANA Message Header .......................................20
      6.3. AVP Format ................................................22
   7. PANA Messages ..................................................24
      7.1. PANA-Client-Initiation (PCI) ..............................27
      7.2. PANA-Auth-Request (PAR) ...................................28
      7.3. PANA-Auth-Answer (PAN) ....................................28
      7.4. PANA-Termination-Request (PTR) ............................28
      7.5. PANA-Termination-Answer (PTA) .............................29
      7.6. PANA-Notification-Request (PNR) ...........................29
      7.7. PANA-Notification-Answer (PNA) ............................29
   8. AVPs in PANA ...................................................29
      8.1. AUTH AVP ..................................................30
      8.2. EAP-Payload AVP ...........................................30
      8.3. Integrity-Algorithm AVP ...................................31
      8.4. Key-Id AVP ................................................31
      8.5. Nonce AVP .................................................31
      8.6. PRF-Algorithm AVP .........................................32
      8.7. Result-Code AVP ...........................................32
      8.8. Session-Lifetime AVP ......................................32
      8.9. Termination-Cause AVP .....................................33
   9. Retransmission Timers ..........................................33
      9.1. Transmission and Retransmission Parameters ................35
   10. IANA Considerations ...........................................35
      10.1. PANA UDP Port Number .....................................36
      10.2. PANA Message Header ......................................36

[include full document text]