Protocol for Carrying Authentication for Network Access (PANA) Requirements
draft-ietf-pana-requirements-09

[Ballot discuss]
4.4: "It is assumed that the communication between PAA and EP(s) is secure." Assumed or required?

4.5.3 -- Please justify this requirement.  I can think of lots of scenarios where it simply wouldn't hold, such as a large hotel or conference center which permits free intranet access but demands payment for most (but not all) external access.  Beyond that, what about tunneled connections?  Are they permissible, given this requirement?

From: Thomas Narten
To: Basavaraj.Patil@nokia.com, Alper Yegin
cc: Margaret Wasserman
Date: Fri, 21 May 2004 11:54:04 -0400
Subject: AD review of draft-ietf-pana-requirements-07.txt

> 4.2. IP Address Assignment
>   
>    Assigning an IP address to the client is outside the scope of PANA.
>    PANA protocol design MAY require the PaC to configure an IP address
>    before using this protocol. Allocating IP addresses to
>    unauthenticated PaCs may create security vulnerabilities, such as IP

Please update to reflect current WG decisions. I.e., PANA assumes an
IP address exists and just uses it.

>    links. Furthermore, two nodes on the same IP subnet do not
>    necessarily satisfy this requirement, as they can be more than one
>    hop away from each other [MULTILINK]. A PAA can be on the NAS

we don't have multilinks... Probably best to just delete this text.


Thomas