July 15, 2002IETF54 PANA WG1 PANA Usage Scenarios Updates (draft-ietf-pana-usage-scenarios-02.txt) Yoshihiro Ohba Subir Das Basavaraj Patil Hesham Soliman

July 15, 2002IETF54 PANA WG2 Objective Illustrate examples/scenarios where PANA can be applied

July 15, 2002IETF54 PANA WG3 Contents A set of usage scenarios to which PANA could be applied –Mobile IPv6 –CDMA2000 –DSL/Cable modem –Limited scope access network

July 15, 2002IETF54 PANA WG4 PANA for Mobile IPv6 Mobile IPv6 does not have the equivalent of an FA Access network needs to authenticate the user before the MN can send BUs to the HA or CN Access authentication can be accomplished via PANA

July 15, 2002IETF54 PANA WG5 HA ASP PANA Binding Update PaC PAA AAA

July 15, 2002IETF54 PANA WG6 Packet Data Network Authentication in CDMA2000 using PANA Authentication in CDMA2000 for packet data access is based on multi-layer authentication –Cellular systems’ authentication for device authentication –In addition, higher layer authentication is performed for user authentication (via PPP and Mobile IP) PANA can be used for authentication in the case of Simple IP service in lieu of PPP –Becomes even more compelling if PPP is substituted by some other protocol for carrying IP

July 15, 2002IETF54 PANA WG7 PDSN RAN PANA Cellular systems’ authentication BSC MSC/HLR PaC PAA

July 15, 2002IETF54 PANA WG8 Authentication in Broadband Networks (DSL/Cable Modem) using PANA PANA could be used for DSL/cable modem instead of PPPoE –More efficient than PPPoE –Since PANA is supposed to be L2-agnostic, it would transparently work with any intermediary L2 devices (hubs or switches) between PaC and PAA

July 15, 2002IETF54 PANA WG9 DSLAM DSL modem Home DSL provider PANA PAA PaC

July 15, 2002IETF54 PANA WG10 Limited scope access networks using PANA Limited scope access is unrestricted Access to Internet initiates PANA exchange for authentication

July 15, 2002IETF54 PANA WG11 WLAN AP PANA Edge subnet Free access Local web server Campus map/ flight schedule, etc. Charged access PaC PAA

July 15, 2002IETF54 PANA WG12 Thank you!

July 15, 2002IETF54 PANA WG13 Why PANA? Need for network access authentication at higher layer when L2 that does not have authentication mechanism –Not all L2 technologies support carrying EAP (not all IEEE 802 devices implement 802.1X) –Assuming every L2 to carry EAP is not realistic –Using PPP authentication for shared media is inefficient Need for higher layer authentication on top of L2 authentication –Multi-layer authentication is widely used and common higher layer authentication carrier protocol needs to be standardized –Web-based authentication that is widely used in hot-spot network access is known to be proprietary hack

July 15, 2002IETF54 PANA WG14 DSLAM hub/ switch WLAN APDSL modem Home DSL provider PANA 802.1X with dynamic key distribution PANA

July 15, 2002IETF54 PANA WG15 DSLAM RouterWLAN APDSL modem Home DSL provider PANA 802.1X with dynamic key distribution