Internet Engineering Task Force (IETF) S. Das Request for Comments: 6153 Telcordia Technologies Category: Standards Track G. Bajko ISSN: 2070-1721 Nokia February 2011
DHCPv4 and DHCPv6 Options for Access Network Discovery and Selection Function (ANDSF) Discovery
Abstract
This document defines new Dynamic Host Configuration Protocol (DHCPv4 and DHCPv6) options to enable a mobile node to discover Access Network Discovery and Selection Function (ANDSF) entities in an IP network. ANDSF is being developed in the Third Generation Partnership Project (3GPP) and provides inter-system mobility policies and access-network-specific information to the mobile nodes (MNs).
Status of This Memo
This is an Internet Standards Track document.
This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 5741.
Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6153.
Copyright Notice
Copyright (c) 2011 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
Das & Bajko Standards Track [Page 1]
RFC 6153 ANDSF DHCP Options February 2011
Table of Contents
1. Introduction ....................................................2 1.1. Conventions Used in This Document ..........................3 1.2. Terminology and Abbreviations Used in This Document ........3 2. ANDSF IPv4 Address Option for DHCPv4 ............................3 3. ANDSF IPv6 Address Option for DHCPv6 ............................4 4. Option Usage ....................................................4 4.1. Usage of ANDSF Options for DHCPv4 ..........................4 4.1.1. Mobile Node Behavior ................................4 4.2. Usage of ANDSF Options for DHCPv6 ..........................5 4.2.1. Mobile Node Behavior ................................5 5. Security Considerations .........................................5 6. IANA Considerations .............................................5 7. Acknowledgments .................................................6 8. References ......................................................6 8.1. Normative References .......................................6 8.2. Informative References .....................................6
Access Network Discovery and Selection Function (ANDSF) is being defined in 3GPP [3GPPTS23.402] to provide necessary network discovery and selection assistance data to the mobile nodes for multi-access network scenarios where 3GPP access-network level solutions are not sufficient for the mobile nodes to perform network discovery and selection of non-3GPP networks.
The information provided by ANDSF contains inter-system mobility policies and access-network-specific data to assist the mobile node with performing the inter-system handover. This set of information can either be provisioned in the mobile node by the home operator or provided to the mobile node (MN) dynamically by the ANDSF over the S14 reference point as defined in [3GPPTS23.402] and [3GPPTS24.302].
In 3GPP, the ANDSF is located either in the subscriber's home operator or visited network and needs to be known to the MN or discovered by the MN. According to [3GPPTS23.402] and [3GPPTS24.302], the ANDSF is discovered through interaction with the Domain Name Service function or the DHCP server function.
This document defines new DHCPv4 and DHCPv6 options called the ANDSF IP Address Options, which allow the MN to locate an ANDSF server.
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119].
1.2. Terminology and Abbreviations Used in This Document
ANDSF (Access Network Discovery and Selection Function): An entity that provides network discovery and selection assistance data to the user entity (UE) as per operator policy [3GPPTS23.402].
Access Network: A network that is accessed by the UE.
3GPP Network: A radio access network specified by Third Generation Partnership Project
Non-3GPP Network: A radio access network specified outside 3GPP by other projects or standards organizations
Length Length (in bytes) of the option excluding the 'Option Code' and the 'Length' fields; 'Length' field is set to 4N, where N is the number of IPv4 addresses carried in the option
IP Address IPv4 address(es) of ANDSF server(s)
ANDSF servers MUST be listed in order of preference, and the client SHOULD process them in decreasing order of preference.
This section describes the ANDSF IPv6 Address Option for DHCPv6. All values in the option are represented in network byte order. The option layout is depicted below:
Length Length (in bytes) of the option excluding the 'Option Code' and the 'Length' fields; 'Length' field is set to 16N, where N is the number of IPv6 addresses carried in the option
IP Address IPv6 address(es) of ANDSF server(s)
ANDSF servers MUST be listed in order of preference, and the client SHOULD process them in decreasing order of preference.
The mobile node MAY request the IP address of an ANDSF server either during initial association with a network or when the policy and access network information is required from ANDSF. It MAY also request the IP address of an ANDSF server when the network information is outdated or the mobile node does not have any ANDSF information.
In order to request an address of a ANDSF server, the mobile node (DHCP client) MUST include an ANDSF IPv4 Address Option in the Parameter Request List (PRL) in the respective DHCP messages as
Das & Bajko Standards Track [Page 4]
RFC 6153 ANDSF DHCP Options February 2011
defined in [RFC2131] and [RFC2132]. The DHCP client MAY initiate a new DHCP exchange or piggyback on other DHCP message exchanges. DHCP client-handling PRL options are specified in [RFC2131], Section 4.4.
The mobile node MAY request the IP address of an ANDSF server according to the scenarios described in Section 4.1.1.
In order to discover the address of an ANDSF server, the mobile node (DHCP client) MUST include an ANDSF IPv6 Address Option in the Option Request Option (ORO) in the respective DHCP messages as defined in [RFC3315]. The DHCP client MAY initiate a new DHCP exchange or piggyback on other DHCP message exchanges. DHCP client-handling ORO options are specified in [RFC3315], Sections 17.1 and 18.1.
If an adversary manages to modify the response from a DHCP server or insert its own response, an MN could be led to contact a rogue ANDSF server. A modified response could also be used to mount an amplification attack.
The DHCP authentication option described in [RFC3118] and [RFC3315] MAY be used to mitigate the above attacks. In deployments where DHCP authentication is not available, 3GPP-specific lower-layer security services can be used to protect DHCP messages [3GPPTS33.402]. The 3GPP ANDSF framework also provides additional mechanisms that can be used to mitigate the above attacks and to protect message exchanges between an ANDSF client and server at the higher layer [3GPPTS33.402].
The authors would like to acknowledge the following individuals for their valuable comments: Patrick Stuper, Vijay Devarapalli, Jouni Korhonen, Jari Arkko, Ted Lemon, and Ralph Droms.