Multiple Interfaces (MIF) WG IETF 79, Beijing, China Margaret Wasserman Hui Deng

Slides:



Advertisements
Similar presentations
IETF Calsify.
Advertisements

1 ISMS WG 79th IETF Beijing November 10, 2010 Goal:Creating a security model for SNMPv3 that will meet the security and operational needs of network administrators.
HIP WG Stockholm, Sweden THURSDAY, July 30, 2009, Congresshall C.
MPTCP – MULTIPATH TCP WG meeting #5 Nov 8 th & 10 th 2010 Beijing, ietf-79 Yoshifumi Nishida Philip Eardley.
OAuth 2.0 Security IETF OAuth WG Conference Call, 14th December 2012.
L2VPN WG “NVO3” Meeting IETF 82 Taipei, Taiwan. Agenda Administrivia Framing Today’s Discussions (5 minutes) Cloud Networking: Framework and VPN Applicability.
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
PPSP Working Group IETF-89 London, UK 16:10-18:40, Tuesday, Webex: participation.html.
CCAMP Working Group Online Agenda and Slides at: Tools start page:
IETF 90: NetExt WG Meeting. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet- Draft.
Multiple Interfaces (MIF) WG IETF 78, Maastricht, Netherlands Margaret Wasserman Hui Deng
L3VPN WG IETF 78 09/11/ :00-15:00 Chairs: Marshall Eubanks Danny McPherson Ben Niven-Jenkins.
BLISS – IETF 71 Jason Fischl Shida Schubert
SIPCLF Working Group Spencer Dawkins Theo Zourzouvillys IETF 76 – November 2009 Hiroshima, Japan.
IETF #82 DRINKS WG Meeting Taipei, Taiwan Fri, Nov 18 th
1 NOTE WELL Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
GROW IETF 78 Maastricht, Netherlands. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft.
IETF 86 PIM wg meeting. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC.
IETF 79 - Beijing, China1 Martini Working Group IETF 79 Beijing Chairs: Bernard Spencer
Extensible Messaging and Presence Protocol (XMPP) WG Interim Meeting, Monday, January 7,
IPPM WG IETF 79. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and.
Technical Plenary Agenda IETF 81 Quebec City, Quebec July 25, 2011 Presentations: Jabber room:
PAWS Protocol to Access White Space DB IETF 83, Paris Gabor Bajko, Brian Rosen.
CCAMP Working Group Online Agenda and Slides at: Data tracker:
Web Authorization Protocol (oauth) Hannes Tschofenig.
IETF #86 - NETCONF WG session 1 NETCONF WG IETF 86 - Orlando, FL, USA MONDAY, March 11, Bert Wijnen Mehmet Ersue.
Slide title In CAPITALS 50 pt Slide subtitle 32 pt DNA wg IETF71.
BFD IETF 83. Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any.
IETF #84 - NETCONF WG session 1 NETCONF WG IETF 84, Vancouver, Canada MONDAY, July 30, Bert Wijnen Mehmet Ersue.
P2PSIP WG IETF 87 P2PSIP WG Agenda & Status Thursday, August 1 st, 2013 Brian Rosen, Carlos J. Bernardos.
Authentication and Authorization for Constrained Environment (ACE) WG Chairs: Kepeng Li, Hannes
IETF 89, LONDON, UK LISP Working Group. 2 Agenda and slides:  lisp.html Audio Stream 
MPTCP – MULTIPATH TCP WG meeting #5 Nov 8 th & 10 th 2010 Beijing, ietf-79 Yoshifumi Nishida Philip Eardley.
DMM WG IETF 84 DMM WG Agenda & Status Tuesday, July 31 st, 2012 Jouni Korhonen, Julien Laganier.
LMAP WG IETF 92, Dallas, TX Dan Romascanu Jason Weil.
Transport Layer Security (TLS) IETF-84 Chairs: Eric Rescorla Joe Salowey.
Interface to the Routing System (IRS) BOF IETF 85, Atlanta November 2012.
IPR WG IETF 62 Minneapolis. IPR WG: Administrivia Blue sheets Scribes Use the microphones Note Well.
IETF #81 - NETCONF WG session 1 NETCONF WG IETF 81, Quebec City, Canada MONDAY, July 25, Bert Wijnen Mehmet Ersue.
Transport Layer Security (TLS) IETF 73 Thursday, November Chairs: Eric Rescorla Joe Salowey.
IETF #73 - NETMOD WG session1 NETMOD WG IETF 73, Minneapolis, MN, USA November 20, David Harrington David Partain.
Transport Layer Security (TLS) IETF-78 Chairs Joe Salowey Eric Rescorla
HIP WG Gonzalo Camarillo David Ward IETF 80, Prague, Czech Republic THURSDAY, March 31, 2011, Barcelona/Berlin.
OPSREA Open Meeting Area Directors: Dan Romascanu and Ron Bonica Monday, March 28, 2011 Morning Session, 10:30 – 11:30, Room Barcelona/Berlin Discussion.
Agenda Behcet Sarikaya Dirk von Hugo November 2012 FMC BOF IETF
MODERN BoF Managing, Ordering, Distributing, Exposing, and Registering telephone Numbers IETF 92.
IETF #82 - NETCONF WG session 1 NETCONF WG IETF 82, Taipei, Taiwan TUESDAY, November 15, Afternoon Session III Bert Wijnen Mehmet Ersue.
Emergency Context Resolution with Internet Technologies (ecrit) Hannes Tschofenig, Marc Linser Chairs.
IETF #85 - NETCONF WG session 1 NETCONF WG IETF 85, Atlanta, USA WEDNESDAY, November 7, Bert Wijnen Mehmet Ersue.
NETWORK-BASED MOBILITY EXTENSIONS WG (NETEXT) July 28 th, 2011 IETF81 1.
Agenda Stig Venaas Behcet Sarikaya November 2011 Multimob WG IETF
OPSAWG chairs: Scott Bradner Christopher Liljenstolpe.
Agenda Wednesday, July 29, :00 – 15:00 Congresshall B Please join the Jabber room: LEDBAT WG IETF 75.
STIR Secure Telephone Identity Revisited
LMAP WG IETF 97 – Seoul, SK November 17, 2016 Dan Romascanu Jason Weil
Agenda Stig Venaas Behcet Sarikaya November 2010
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
CAPWAP Working Group IETF 73 Minneapolis 18 Nov 2008, 17:10-18:10
Kathleen Moriarty, Trusted Execution Environment Provisioning (TEEP) BoF IETF-100 November 2017 Chairs: Nancy Cam-Winget,
Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made.
Thursday, 20th of July 2017.
Multiple Interfaces (MIF) WG
Flexible Ethernet (Side meeting)
SIPREC WG, Interim virtual meeting , GMT
TEAS CCAMP MPLS PCE Working Groups
SIPBRANDY Chair Slides
Multiple Interfaces (MIF) WG
Scott Bradner & Martin Thomson
NETCONF WG IETF 80, Prague, Czech Republic March 31,
Presentation transcript:

Multiple Interfaces (MIF) WG IETF 79, Beijing, China Margaret Wasserman Hui Deng

Note Well Any submission to the IETF intended by the Contributor for publication as all or part of an IETF Internet-Draft or RFC and any statement made within the context of an IETF activity is considered an "IETF Contribution". Such statements include oral statements in IETF sessions, as well as written and electronic communications made at any time or place, which are addressed to: - the IETF plenary session, - any IETF working group or portion thereof, - the IESG or any member thereof on behalf of the IESG, - the IAB or any member thereof on behalf of the IAB, - any IETF mailing list, including the IETF list itself, any working group or design team list, or any other list functioning under IETF auspices, - the RFC Editor or the Internet-Drafts function All IETF Contributions are subject to the rules of RFC 5378 and RFC 3979 (updated by RFC 4879). Statements made outside of an IETF session, mailing list or other function, that are clearly not intended to be input to an IETF activity, group or function, are not IETF Contributions in the context of this notice. Please consult RFC 5378 and RFC 3979 for details. A participant in any IETF activity is deemed to accept all IETF rules of process, as documented in Best Current Practices RFCs and IESG Statements. A participant in any IETF activity acknowledges that written, audio and video records of meetings may be made and may be available to the public.

Logistics Note taker and jabber scribe Meeting materials (Slides, Agenda, etc) – XMPP Mailing list –

Agenda Agenda bashing (Chairs, 5 min) Documents with IESG (Chairs, 10 min) –draft-ietf-mif-problem-statement-05 >Responding to IESG Discusses and Comments –draft-ietf-mif-current-practices-02 >Responding to AD Review comments Current Practice Analysis (Chairs, 5 min) –draft-cao-mif-analysis-01.txt >Draft hasn’t been updated since 78 th Insufficient info to do analysis Solutions Work in Charter Other proposals

Agenda - Solutions Work in Charter 5.1 Split-DNS solution (Teemu, 10 min) draft-savolainen-mif-dns-server-selection-04 > Adopt this as a WG work item? 5.2 DHCP Route Option draft (Design Team, 10 min) > Do we have a draft that has design team consensus? > If so, adopt it as a WG document? 5.3 MIF api (Yuri, 10 min) draft-liu-mif-api-extension-03 > Conceptual API only > Adopt this as a WG work item?

Agenda - Other Proposals (If Time Allows) 6.1 Connection manager requirements (Gaetan Feige, 15 min) draft-seite-mif-connection-manager-02 > Focus on problems not solution requirements - Problem of connectivity to networks where authentication is needed for Internet access > How do we consider additional problems? 6.2 Holding the on-going sessions (Zhen, 5 min) draft-cao-mif-ongoing-session-00 > How does this related to problems in Problem Statement?

draft-ietf-mif-problem-statement IESG Review Don Romascanu > IEEE , acronyms Lars Eggert > QoS in the interface should not be considered by MIF Ralph Droms >I have a fundamental problem with the way in which this document characterizes the problems resulting from the simultaneous use of multiple interfaces as all resulting from receiving different configuration objects from different administrative domains. In my opinion, some of the example problems in the document are a result of other problems inherent with the simlutaneous use of multiple interfaces. This distinction is important because, again in my opinion, there are mif problems which cannot be solved by changes to the configuration behavior in the host. I see two ways to address my concern: either be explicit in limiting the problem statement and mif deliverables to those problems that can be solved with proper handling of configuration information from multiple admin domains or extend the scope of this document to include any problems that may result from the disparate environments (IP reachability, DNS resolution, QoS) to which interfaces are attached.

draft-ietf-mif-problem-statement IESG Review Adrian Farrel > Section 5, item 3 on routing, sub-bullet 2 describes an underlying problem attributed to routing. As routing is sued by this section, it seems to apply to host interface selection, first hop router selection, and general path selection. As written, the text seems an invitation for the MIF working group to delve into the issues of host control over routing path selection. Please do not go there. I sould suggest tightening the text up to make it clear that what is meant is policy based itnerface and first-hop router selection, where policy may reflect the many things listed in sub-bullet 2. Sean Tuner > Security Consideration 1)Lower layer authentication and encryption It's possible that some interfaces may have link layer or IP layer encryption and authentication. Its possible that this characteristic might be used in determining how configuration parameters are processed. Some connection managers may already do this to a certain extent. I think this should be listed as a consideration in the appropriate sections of the document (3.1, 3.6,5) 2) 2) I think the security considerations can be expanded It discusses that information may be leaked from one network to another which seems to be talking about generic data. This is true, but it seems that would be worthwhile to talk specifically about the information discussed in the document. For example it seems that it is at least possible for one interface to send configuration parameters that will cause a denial of service on another interface. It may also be possible for one host to set configuration parameters which cause certain traffic to be forwarded to an attacker.

draft-ietf-mif-current-practices-02 AD Review This draft got review comments from AD, we need more detail descriptions from each OS, if it is not sufficent enough, then we have to remove it from the document