Protocol for Carrying Authentication for Network Access (PANA)
RFC 5191
Document | Type |
RFC - Proposed Standard
(May 2008; Errata)
Updated by RFC 5872
Was draft-ietf-pana-pana (pana WG)
|
|
---|---|---|---|
Authors | Dan Forsberg , Basavaraj Patil , Alper Yegin , Yoshihiro Ohba , Hannes Tschofenig | ||
Last updated | 2020-01-21 | ||
Stream | IETF | ||
Formats | plain text html pdf htmlized with errata bibtex | ||
Stream | WG state | (None) | |
Document shepherd | No shepherd assigned | ||
IESG | IESG state | RFC 5191 (Proposed Standard) | |
Consensus Boilerplate | Unknown | ||
Telechat date | |||
Responsible AD | Mark Townsley | ||
Send notices to | (None) |
Network Working Group D. Forsberg Request for Comments: 5191 Nokia Category: Standards Track Y. Ohba, Ed. Toshiba B. Patil H. Tschofenig Nokia Siemens Networks A. Yegin Samsung May 2008 Protocol for Carrying Authentication for Network Access (PANA) Status of This Memo This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. Abstract This document defines the Protocol for Carrying Authentication for Network Access (PANA), a network-layer transport for Extensible Authentication Protocol (EAP) to enable network access authentication between clients and access networks. In EAP terms, PANA is a UDP-based EAP lower layer that runs between the EAP peer and the EAP authenticator. Forsberg, et al. Standards Track [Page 1] RFC 5191 PANA May 2008 Table of Contents 1. Introduction ....................................................3 1.1. Specification of Requirements ..............................4 2. Terminology .....................................................4 3. Protocol Overview ...............................................6 4. Protocol Details ................................................7 4.1. Authentication and Authorization Phase .....................7 4.2. Access Phase ..............................................11 4.3. Re-Authentication Phase ...................................11 4.4. Termination Phase .........................................13 5. Processing Rules ...............................................13 5.1. Fragmentation .............................................13 5.2. Sequence Number and Retransmission ........................14 5.3. PANA Security Association .................................15 5.4. Message Authentication ....................................17 5.5. Message Validity Check ....................................17 5.6. PaC Updating Its IP Address ...............................19 5.7. Session Lifetime ..........................................19 6. Message Format .................................................20 6.1. IP and UDP Headers ........................................20 6.2. PANA Message Header .......................................20 6.3. AVP Format ................................................22 7. PANA Messages ..................................................24 7.1. PANA-Client-Initiation (PCI) ..............................27 7.2. PANA-Auth-Request (PAR) ...................................28 7.3. PANA-Auth-Answer (PAN) ....................................28 7.4. PANA-Termination-Request (PTR) ............................28 7.5. PANA-Termination-Answer (PTA) .............................29 7.6. PANA-Notification-Request (PNR) ...........................29 7.7. PANA-Notification-Answer (PNA) ............................29 8. AVPs in PANA ...................................................29 8.1. AUTH AVP ..................................................30 8.2. EAP-Payload AVP ...........................................30 8.3. Integrity-Algorithm AVP ...................................31 8.4. Key-Id AVP ................................................31 8.5. Nonce AVP .................................................31 8.6. PRF-Algorithm AVP .........................................32 8.7. Result-Code AVP ...........................................32 8.8. Session-Lifetime AVP ......................................32 8.9. Termination-Cause AVP .....................................33 9. Retransmission Timers ..........................................33 9.1. Transmission and Retransmission Parameters ................35 10. IANA Considerations ...........................................35 10.1. PANA UDP Port Number .....................................36 10.2. PANA Message Header ......................................36 10.2.1. Message Type ......................................36Show full document text