simplified Protocol for Carrying Authentication for Network Access (sPANA)

1
simplified Protocol for Carrying Authentication
for Network Access (sPANA)
draft-xia-pana-simplified-00.txthttp//www-etud.i
ro.umontreal.ca/sarikaya/pana/draft-xia-pana-simp
lified-00.txt

• Frank Xia
• John Kaippallimalil
• March 2008

2
Problem Statement

• Basic PANA requires a PaC having IP address
  before PANA authentication. Unspecified IP
  address for a PaC is excluded assumptively in
  basic PANA.
• The PAA may be one or more IP hops away
  from the PaCs
• (draft-ietf-pana-framework-10)
• DSL Forum requires that authentication should
  be prior to IP address
• allocation.
• Basic PANA only support EAP authentication
• PANA CHAP support will facilitate smooth
  migration from Point-to-Point
• Protocol (PPP) sessions to IP sessions in a
  DSL Broadband network
• environment.

3
Solution - unspecified address support

• PANA-Auth-Request with all 0 IP address as its
  source address, and 0xffffffff as its
  destination address
• The mechanism is identical to how DHCP operates
  without an IPaddress on the client.
• DHCPDISCOVER message triggers PANA
  authentication
• DHCP procedure resumes after PANA authentication.

4
Solution- PANA CHAP Support
Hosts present authentication preference to servers
5
Next Steps
Make it a WG document?
6
Thank You. Questions?