NETEXT WG                                                  S. Gundavelli
Internet-Draft                                                     Cisco
Intended status: Standards Track                             J. Korhonen
Expires: June 28, 2012                            Nokia Siemens Networks
                                                              M. Grayson
                                                                K. Leung
                                                           R. Pazhyannur
                                                                   Cisco
                                                       December 26, 2011


         Access Network Identifier Option for Proxy Mobile IPv6
             draft-ietf-netext-access-network-option-01.txt

Abstract

   This specification defines a mechanism and a related mobility option
   for carrying the access network identifier and the access operator
   identification information from the mobile access gateway to the
   local mobility anchor over Proxy Mobile IPv6.  Based on the received
   information, the local mobility anchor is able to provide access
   network and access operator specific handling or policing for the
   mobile node traffic.

Status of this Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on June 28, 2012.

Copyright Notice

   Copyright (c) 2011 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents



Gundavelli, et al.        Expires June 28, 2012                 [Page 1]


Internet-Draft      Access Network Identifier Option       December 2011


   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.


Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  3
   2.  Conventions and Terminology  . . . . . . . . . . . . . . . . .  4
     2.1.  Conventions  . . . . . . . . . . . . . . . . . . . . . . .  4
     2.2.  Terminology  . . . . . . . . . . . . . . . . . . . . . . .  4
   3.  Access Network Identifier Option . . . . . . . . . . . . . . .  4
     3.1.  Access Network Identifier Sub-Option . . . . . . . . . . .  5
     3.2.  Network-Identifier Sub-Option  . . . . . . . . . . . . . .  6
     3.3.  Geo-Location ANI Sub-Option  . . . . . . . . . . . . . . .  6
     3.4.  Operator-Identifier Sub-Option . . . . . . . . . . . . . .  7
   4.  Protocol Considerations  . . . . . . . . . . . . . . . . . . .  8
   5.  IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 10
   6.  Security Considerations  . . . . . . . . . . . . . . . . . . . 10
   7.  Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 11
   8.  References . . . . . . . . . . . . . . . . . . . . . . . . . . 11
     8.1.  Normative References . . . . . . . . . . . . . . . . . . . 11
     8.2.  Informative References . . . . . . . . . . . . . . . . . . 11
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 12























Gundavelli, et al.        Expires June 28, 2012                 [Page 2]


Internet-Draft      Access Network Identifier Option       December 2011


1.  Introduction

   In many deployments there is a need for the local mobility anchor to
   provide differentiated services and policing to the mobile nodes
   based on the access network to which they are attached.  Policy
   systems in mobility architectures such as PCC [TS23203] and ANDSF
   [TS23402] in 3GPP system allow configuration of policy rules with
   conditions based on the access network information.  For example, the
   service treatment for the mobile node's traffic may be different when
   they are attached to a access network owned by the home operator than
   when owned by a roaming partner.  The service treatment can also be
   different based on the configured SSID in case of IEEE 802.11 based
   access networks.

   The Proxy Mobile IPv6 specification [RFC5213] allows carrying of the
   Access Technology Type (ATT) information from the mobile access
   gateway (MAG) to the local mobility anchor (LMA).  However, the
   Access Technology Type alone is not sufficient for correct policy to
   be applied at the LMA and there is a need to ensure additional
   information related to the access network is available.  Learning the
   access network operator identity may not be possible for an LMA
   without a support of an additional policy framework that is able to
   provide required information out of band to the LMA.  Such a policy
   framework may not be required for all Proxy Mobile IPv6 deployments
   and hence an alternative approach for carrying such information is
   required to ensure that additional information related to the access
   network is available.

   This document defines a new mobility option, Access Network
   Identifier (ANI) option for Proxy Mobile IPv6 (PMIPv6), that can be
   used by mobile access gateway for carrying the access network
   information to the local mobility anchor.  The specific details on
   how the local mobility anchor uses this information is out-of-scope
   for this document.


       Access-Net-1: Network-Id, Location, Operator-Id
       +--+
       |AP|-------.                        {Access Specific Policies)
       +--+       |             _-----_             |
                +-----+       _(       )_        +-----+
                | MAG |-=====(   PMIPv6  )======-| LMA |-
                +-----+       (_ Tunnel_)        +-----+
       +--+       |             '-----'
       |AP|-------'
       +--+
       Access-Net-2: Network-Id, Location, Operator-Id




Gundavelli, et al.        Expires June 28, 2012                 [Page 3]


Internet-Draft      Access Network Identifier Option       December 2011


                 Figure 1: Access Networks attached to MAG

   In Figure 1, the mobile access gateway can potentially deliver the
   information elements related to the access network to the local
   mobility anchor over Proxy Mobile IPv6 signaling messages.


2.  Conventions and Terminology

2.1.  Conventions

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in RFC 2119 [RFC2119].

2.2.  Terminology

   All the mobility related terms used in this document are to be
   interpreted as defined in the Proxy Mobile IPv6 specifications
   [RFC5213] and [RFC5844].  Additionally, this document uses the
   following abbreviations:

   Service Set Identifier

      Service Set Identifier (SSID) identifies the name of the IEEE
      802.11 network.  SSID differentiates from one network to the
      other.

   Vendor ID

      The Vendor ID is the SMI Network Management Private Enterprise
      Code of the IANA-maintained Private Enterprise Numbers registry
      [SMI].

   ANDSF

      Access Network Discovery and Selection Function.

   PCC

      Policy and Charging Control Framework.


3.  Access Network Identifier Option

   The Access Network Identifier is a mobility option defined for
   carrying it in Proxy Binding Update (PBU) and Proxy Binding
   Acknowledgement (PBA) messages exchanged between a local mobility



Gundavelli, et al.        Expires June 28, 2012                 [Page 4]


Internet-Draft      Access Network Identifier Option       December 2011


   anchor and a mobile access gateway.  This mobility option is used for
   carrying one or more Access Network Identifier Sub-options.  The
   format of the Access Network Identifier Sub-option is defined in
   Section 3.1.  There can only be a single instance of this mobility
   option in a mobility message.

   The alignment requirement for this option is 4n.


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      Type     |   Length      |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
                  ...      ANI Sub-option(s) ...                   ~
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


                Figure 2: Access Network Identifier Option

   Type:  (IANA-1)

   Length:  8-bit unsigned integer indicating the length in octets of
      the option, excluding the type and length fields.

3.1.  Access Network Identifier Sub-Option

   The Access Network Identifier Sub-Option is defined for carrying it
   in the Access Network Identifier mobility option.  This sub-option is
   used for carrying information elements related to the access network
   to which the mobile node is attached.  The format of the Access
   Network Identifier Sub-option is defined as follows.


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |    ANI Type   | ANI Length    |         Option Data           ~
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


              Figure 3: Access Network Identifier Sub-Option

   ANI Type:  8-bit unsigned integer indicating the type of the Access
      Network Identifier sub-option.  This specification defines the
      following types:





Gundavelli, et al.        Expires June 28, 2012                 [Page 5]


Internet-Draft      Access Network Identifier Option       December 2011


      1 -  Network-Identifier Sub-option

      2 -  Geo-Location Sub-option

      3 -  Operator-Identifier Sub-option

   ANI Length:  8-bit unsigned integer indicating the number of octets
      needed to encode the Network Identifier sub-option excluding the
      ANI Type and ANI Length fields of the sub-option.

3.2.  Network-Identifier Sub-Option

   The Network-Identifier is a mobility sub-option that can be carried
   in Access Network Identifier option defined in Section 3.  This sub-
   option can be used for carrying the IEEE 802.11 SSID name of the
   network to which the mobile node is attached.  There can only be a
   single instance of this specific sub-option in any Access Network
   Identifier option.  The format of this option is defined below.


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   | ANI Type=1    |  ANI Length   |             SSID              ~
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


                  Figure 4: Network-Identifier Sub-option

   ANI Type:  It should be set to value of (1), indicating that its a
      Network-Identifier sub-option

   ANI Length:  Total length of this sub option, excluding the ANI Type
      and ANI length fields.  The value can be in the range of 2 to 32
      octets.

   SSID:  SSID of the access network to which the mobile node is
      attached.  The string is carried in UTF-8 representation.

3.3.  Geo-Location ANI Sub-Option

   The Geo-Location is a mobility sub-option that can be carried in
   Access Network Identifier option defined in Section 3.  This sub-
   option can be used for carrying the Geo-location of the network to
   which the mobile node is attached.  There can only be a single
   instance of this specific sub-option in any Access Network Identifier
   option.  The format of this option is defined below.




Gundavelli, et al.        Expires June 28, 2012                 [Page 6]


Internet-Draft      Access Network Identifier Option       December 2011


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |  ANI Type=2   | ANI Length=8  |N|     Latitude Degrees        |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |  La-Minutes   | La-Seconds    |E|     Longitude Degrees       |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |  Lo-Minutes   | Lo-Seconds    |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


                   Figure 5: Geo-Location ANI sub-option

   ANI Type:  It should be set to value of (2), indicating that its Geo-
      Location sub-option

   ANI Length:  Total length of this sub-option, excluding the ANI Type
      and ANI length fields.  It should be set to a value of (8).

   N: When the flag (N) is set to a value of (1), it means North, else
      its South

   Latitude Degrees:  Allowed range from 0 to 90 degrees, northern or
      southern hemisphere as qualified by the (N) flag

   La-Minutes:  Allowed range is 0 to 59

   La-Seconds:  Allowed range is 0 to 59

   E: When the flag (E) is set to a value of (1), it means East, else
      its West

   Longitude Degrees:  Allowed range from 0 to 90 degrees, eastern or
      western hemisphere as qualified by the (E) flag

   Lo-Minutes:  Allowed range is 0 to 59

   Lo-Seconds:  Allowed range is 0 to 59

3.4.  Operator-Identifier Sub-Option

   The Operator-Identifier is a mobility sub-option that can be carried
   in Access Network Identifier option defined in Section 3.  This sub-
   option can be used for carrying the operator identifier of the access
   network to which the mobile node is attached.  There can only be a
   single instance of this specific sub-option in any Access Network
   Identifier option.  The format of this option is defined below.




Gundavelli, et al.        Expires June 28, 2012                 [Page 7]


Internet-Draft      Access Network Identifier Option       December 2011


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   | ANI Type=3    |    ANI Length   |   Op-ID Type  |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                        Operator Identifier                    ~
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+



                 Figure 6: Operator-Identifier Sub-option

   ANI Type:  It should be set to value of (3), indicating that its
      Operator-Identifier sub-option

   ANI Length:  Total length of this sub option, excluding the ANI Type
      and ANI length fields.

   Operator Identifier (Op-ID) Type:  8-bit unsigned integer indicating
      the type of the Operator Identifier.  Currently the following
      types are defined:

      0 -  reserved.

      1 -  Vendor ID as a four octet Private Enterprise Number [SMI].

      2 -  Realm of the operator.  Realm names are required to be
         unique, and are piggybacked on the administration of the DNS
         namespace.  Realms are encoded using a domain name encoding
         defined in [RFC1035].

   Operator Identifier:  Up to 253 octets of the operator identifier.
      The encoding of the identifier depends on the used Operator-ID
      Type.  Numeric values are encoded in network byte order and
      strings have no terminating '\0' mark.


4.  Protocol Considerations

   The following considerations apply to the local mobility anchor and
   the mobile access gateway.

   o  The conceptual Binding Cache entry data structure maintained by
      the local mobility anchor, described in Section 5.1 of [RFC5213],
      MUST be extended to store the access network information
      associated with the current session.  Specifically, the following
      parameters must be defined.




Gundavelli, et al.        Expires June 28, 2012                 [Page 8]


Internet-Draft      Access Network Identifier Option       December 2011


      Network Identifier

      Operator Identifier

      Geo-location

   o  The conceptual Binding Update List entry data structure maintained
      by the mobile access gateway, described in Section 6.1 of
      [RFC5213], MUST be extended to store the access network
      information associated with the current session.  Specifically,
      the following parameters must be defined.

      Network Identifier

      Operator Identifier

      Geo-location

   o  The mobile access gateway may be statically configured with the
      access network information related to the access links its
      attached to.  In access systems where the mobile access gateway is
      attached to a micro-mobility domain such as IEEE 802.11 WLAN
      domain, the DHCP relay agent function in that micro-mobility
      domain may be configured to add the access network information in
      DHCP option (82), which is the DHCP Relay Agent Information option
      [RFC3046].  The mobile access gateway may learn the access network
      information from this option.  The specifics on how this DHCP
      option 82 is encoded is outside the scope of this document.

   o  If the mobile access gateway is configured to support to Access
      Network Information option, it SHOULD include this option in all
      Proxy Binding Update message that it sends to the local mobility
      anchor.  The Access Network Information option SHOULD be
      constructed as specified in Section 3.  It should include the
      relevant ANI sub-options that the mobile access gateway is
      configured to carry them in the Proxy Mobile IPv6 signaling
      messages.

   o  On receiving a Proxy Binding Update message [RFC5213] from a
      mobile access gateway with the Access Network Information option,
      the local mobility anchor must process the option and update the
      corresponding fields in the Binding Cache entry.

   o  If the received Proxy Binding Update message does not include the
      Access Network Information option, but the mobility session
      associated to that request has the previously notified access
      network specific information elements, the same MUST be updated
      and those information elements previously received MUST be



Gundavelli, et al.        Expires June 28, 2012                 [Page 9]


Internet-Draft      Access Network Identifier Option       December 2011


      removed.

   o  The local mobility anchor MAY choose to use the access network
      information options for applying any access operator specific
      handling or policing of the mobile node traffic.


5.  IANA Considerations

   This document requires the following IANA actions.

      Action-1: This specification defines a new Mobility Header option,
      the Access Network Identifier.  This mobility option is described
      in Section 3.  The Type value for this option needs to be assigned
      from the same numbering space as allocated for the other mobility
      options, as defined in [RFC6275].

      Action-2: This specification defines a new mobility sub-option
      format, Access Network Information (ANI) sub-option.  The format
      of this mobility sub-option is described in Section 3.1.  This
      sub-option can be carried in Access Network Information option.
      The type value for this sub-option needs to be managed by IANA,
      under the Registry, Access Network Information sub-option.  This
      specification reserves the type values of (1), (2) and (3).
      Approval of new Access Network Information (ANI) sub-option type
      values are to be made through IANA Expert Review.

      Action-3: This specification defines a new mobility sub-option,
      Operator-Identifier sub-option.  The format of this mobility sub-
      option is described in Section 3.4.  The Operator Identifier
      (Op-Id) Type field of this sub-option introduces a new number
      space.  This number space needs to be managed by IANA, under the
      Registry, Operator Identifier Type Registry.  This specification
      reserves the type values of (0), (1) and (2).  Approval of new
      Operator Identifier Type values are to be made through IANA Expert
      Review.


6.  Security Considerations

   The Access Network Information option defined in this specification
   is for use in Proxy Binding Update and Proxy Binding Acknowledgement
   messages.  This option is carried like any other mobility header
   option as specified in [RFC6275] and does not require any special
   security considerations.

   The Geo-location sub-option carried in the Access Network Information
   option exposes the geo-location of the mobile node as presented by



Gundavelli, et al.        Expires June 28, 2012                [Page 10]


Internet-Draft      Access Network Identifier Option       December 2011


   the mobile access gateway and this information should be considered
   as very sensitive.  Care must be taken to secure the Proxy Mobile
   IPv6 signaling messages when carrying this sub-option.  The base
   Proxy Mobile IPv6 specification [RFC6275] specifies the use of IPsec
   for securing the signaling messages and those mechanisms can be
   enabled for protecting this information.


7.  Acknowledgements

   The authors would also like to acknowledge all the discussions
   related to carrying Access Network Information option in Proxy Mobile
   IPv6 protocol signaling.  Additionally, the authors would like to
   thank Carlos Bernardos, Stefano Faccin, Ryuji Wakikawa, Basavaraj
   Patil, Gerardo Gieratta, and Eric Voit for all the discussions around
   this topic.


8.  References

8.1.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC5213]  Gundavelli, S., Leung, K., Devarapalli, V., Chowdhury, K.,
              and B. Patil, "Proxy Mobile IPv6", RFC 5213, August 2008.

   [RFC5844]  Wakikawa, R. and S. Gundavelli, "IPv4 Support for Proxy
              Mobile IPv6", RFC 5844, May 2010.

8.2.  Informative References

   [RFC1035]  Mockapetris, P., "Domain names - implementation and
              specification", STD 13, RFC 1035, November 1987.

   [RFC3046]  Patrick, M., "DHCP Relay Agent Information Option",
              RFC 3046, January 2001.

   [RFC6275]  Perkins, C., Johnson, D., and J. Arkko, "Mobility Support
              in IPv6", RFC 6275, July 2011.

   [SMI]      IANA, "PRIVATE ENTERPRISE NUMBERS", SMI Network Management
              Private Enterprise Codes, February 2011.

   [TS23203]  3GPP, "Policy and Charging Control Architecture", 2010.

   [TS23402]  3GPP, "Architecture enhancements for non-3GPP accesses",



Gundavelli, et al.        Expires June 28, 2012                [Page 11]


Internet-Draft      Access Network Identifier Option       December 2011


              2010.


Authors' Addresses

   Sri Gundavelli
   Cisco
   170 West Tasman Drive
   San Jose, CA  95134
   USA

   Email: sgundave@cisco.com


   Jouni Korhonen
   Nokia Siemens Networks
   Linnoitustie 6
   Espoo  FIN-02600
   Finland

   Email: jouni.nospam@gmail.com


   Mark Grayson
   Cisco
   11 New Square Park
   Bedfont Lakes, FELTHAM  TW14 8HA
   ENGLAND

   Email: mgrayson@cisco.com


   Kent Leung
   Cisco
   170 West Tasman Drive
   San Jose, CA  95134
   USA

   Email: kleung@cisco.com












Gundavelli, et al.        Expires June 28, 2012                [Page 12]


Internet-Draft      Access Network Identifier Option       December 2011


   Rajesh Pazhyannur
   Cisco
   170 West Tasman Drive
   San Jose, CA  95134
   USA

   Email: rpazhyan@cisco.com












































Gundavelli, et al.        Expires June 28, 2012                [Page 13]