Moby Dick Consolidated System Integration Plan
Moby Dick Consolidated System Integration Plan Moby Dick Consolidated System Integration Plan
D0103v1.doc Version 1 6.7.2003 4.5.2.9 AAA message flow This section describes and specifies the message flows. The flows are divided in to request flow and reply flows. The request flow originate from MN and trans the AAA entities towards the AAA server. Whereas the reply flow is the response to the request flow and goes towards the MN. MN MNARq Attendant AAA.f AAA.h ARR.f ARR Request flow MNARp ARA.f ARA Reply flow Figure 84: AAA message flows Note, upon the reception of the ARA, the AAAC.f dumps the NVUP (part of user’s profile) to the QoSB.f. For more details see section: QoS Interface. 4.5.2.9.1 MN to Attendant When the MN is switched on or after the expiration of the authorization lifetime, the MN communicates with the attendant to request an access. As Diameter is not used for communication between an MN and Attendant, the diameter AAA request from the MN must be sent using UDP to the Attendant. Message: MNARq (Mobile Node AAA Request) UDP packet containing an AAA message having the following structure: Parameters: Challenge User-Name MIPv6-Mobile-Node-Address MIPv6-Home -Agent-Address MIP-Binding-Update MN-DH-PV MN-MAC In the following sections the content of the AAA message is listed. Challenge The attendant broadcasts the challenge. The format of the Challenge has the following structure. AVP code: 0xfff00400 Type: Unsigned32 Length: 12 (16 if the 'V' bit is enabled) Value: The challenge MN has got from the Attendant User-Name D0103v1.doc 114 / 168
D0103v1.doc Version 1 6.7.2003 This user name should not be seen as the username in a Unix system. This user name is inferred from the definition as defined in RFC2486. Note: It is to be kept in mind that mobile-IP DOES NOT have anything to do with user names AVP code: 1 Type: UTF8String Length: Variable Contains: NAI /* As defined in RFC2486 / The Network Access Identifier */ MIPv6 -Mobile-Node-Address This address has been specified as it is defined in RFC2486 Diameter Mobile IPv6 Application AVP code: 0xfff00001 /* TBD in the draft */ Type: IPAddress Length: 24 (28 with bit V enabled) /* 16 (IPv6 Addr) + 8 (12) (AVP Header) */ Contains: Mobile's Node Home Address MIPv6 -Home-Agent-Address This is optional since a Home Agent can be assigned automatically. This also defined in RFC 2486 Diameter Mobile IPv6 Application AVP code: 0xfff00002 /* TBD in the draft */ Type: IPAddress Length: 24 (28 with bit V enabled) /* 16 (IPv6 Addr) + 8 (12) (AVP Header) */ Contains: Mobile's Node Home Agent AddressA MIP-Binding-Update The Home Registration as defined in RFC2486. This is optional because it is used only in the scenario in which mobile IP and AAA signalling are combined AVP code: 0xfff00003 /* TBD in the draft */ Type: OctetString Length: Variable Contains: Mobile's Node Home Registration message MN-DH-PV Defined by Moby Dick. AVP containing the public value of the MN's Diffie -Hellman key AVP code: 0xfff00500 Type: OctetString Length: 128 ( 132 when V is set ) Contains: public value of the MN's Diffie-Hellman key MN-MAC Defined by Moby Dick AVP code: 0xfff00004 Type: OctetString Length: 16 ( 20 when V is set ) Contains: HMAC-MD5 over the following AVPs: {Challenge }, { User-Name }, { MIPv6-Mobile-Node-Address } { MIPv6-Home-Agent-Address }, { MIP-Binding-Update } the HMAC-MD5 is computed using SK[MN-AAAC.h] 4.5.2.9.2 Attendant to AAAC.f Once the Attendant has received the UDP packets containing the AAA messages, it will send all the upstream messages using Diameter (i.e. over TCP / SCTP). D0103v1.doc 115 / 168
- Page 63 and 64: D0103v1.doc Version 1 6.7.2003 Filt
- Page 65 and 66: D0103v1.doc Version 1 6.7.2003 4.2.
- Page 67 and 68: D0103v1.doc Version 1 6.7.2003 •
- Page 69 and 70: D0103v1.doc Version 1 6.7.2003 The
- Page 71 and 72: D0103v1.doc Version 1 6.7.2003 is t
- Page 73 and 74: D0103v1.doc Version 1 6.7.2003 4.3
- Page 75 and 76: D0103v1.doc Version 1 6.7.2003 4.3.
- Page 77 and 78: D0103v1.doc Version 1 6.7.2003 This
- Page 79 and 80: D0103v1.doc Version 1 6.7.2003 This
- Page 81 and 82: D0103v1.doc Version 1 6.7.2003 4.3.
- Page 83 and 84: D0103v1.doc Version 1 6.7.2003 4.3.
- Page 85 and 86: D0103v1.doc Version 1 6.7.2003 The
- Page 87 and 88: D0103v1.doc Version 1 6.7.2003 4.3.
- Page 89 and 90: D0103v1.doc Version 1 6.7.2003 be u
- Page 91 and 92: D0103v1.doc Version 1 6.7.2003 o Ma
- Page 93 and 94: D0103v1.doc Version 1 6.7.2003 Gene
- Page 95 and 96: D0103v1.doc Version 1 6.7.2003 Upli
- Page 97 and 98: D0103v1.doc Version 1 6.7.2003 Now
- Page 99 and 100: D0103v1.doc Version 1 6.7.2003 3. D
- Page 101 and 102: D0103v1.doc Version 1 6.7.2003 User
- Page 103 and 104: D0103v1.doc Version 1 6.7.2003 Inte
- Page 105 and 106: D0103v1.doc Version 1 6.7.2003 User
- Page 107 and 108: D0103v1.doc Version 1 6.7.2003 Serv
- Page 109 and 110: D0103v1.doc Version 1 6.7.2003 S1 E
- Page 111 and 112: D0103v1.doc Version 1 6.7.2003 The
- Page 113: D0103v1.doc Version 1 6.7.2003 Old
- Page 117 and 118: D0103v1.doc Version 1 6.7.2003 Leng
- Page 119 and 120: D0103v1.doc Version 1 6.7.2003 4.5.
- Page 121 and 122: D0103v1.doc Version 1 6.7.2003 MN M
- Page 123 and 124: D0103v1.doc Version 1 6.7.2003 4.5.
- Page 125 and 126: D0103v1.doc Version 1 6.7.2003 Afte
- Page 127 and 128: D0103v1.doc Version 1 6.7.2003 Pack
- Page 129 and 130: D0103v1.doc Version 1 6.7.2003 4.5.
- Page 131 and 132: D0103v1.doc Version 1 6.7.2003 miss
- Page 133 and 134: D0103v1.doc Version 1 6.7.2003 Conn
- Page 135 and 136: D0103v1.doc Version 1 6.7.2003 4.5.
- Page 137 and 138: D0103v1.doc Version 1 6.7.2003 Acce
- Page 139 and 140: D0103v1.doc Version 1 6.7.2003 Logg
- Page 141 and 142: D0103v1.doc Version 1 6.7.2003 repr
- Page 143 and 144: D0103v1.doc Version 1 6.7.2003 Type
- Page 145 and 146: D0103v1.doc Version 1 6.7.2003 o DM
- Page 147 and 148: D0103v1.doc Version 1 6.7.2003 5 Mo
- Page 149 and 150: D0103v1.doc Version 1 6.7.2003 MN A
- Page 151 and 152: D0103v1.doc Version 1 6.7.2003 3 AA
- Page 153 and 154: D0103v1.doc Version 1 6.7.2003 give
- Page 155 and 156: D0103v1.doc Version 1 6.7.2003 9 Ha
- Page 157 and 158: D0103v1.doc Version 1 6.7.2003 MN 1
- Page 159 and 160: D0103v1.doc Version 1 6.7.2003 5.2.
- Page 161 and 162: D0103v1.doc Version 1 6.7.2003 No.
- Page 163 and 164: D0103v1.doc Version 1 6.7.2003 The
D0103v1.doc Version 1 6.7.2003<br />
This user name should not be seen as the username in a Unix system. This user name is inferred from the<br />
definition as defined in RFC2486.<br />
Note: It is to be kept in mind that mobile-IP DOES NOT have anything to do with user names<br />
AVP code: 1<br />
Type: UTF8String<br />
Length: Variable<br />
Contains: NAI /* As defined in RFC2486 / The Network Access Identifier */<br />
MIPv6 -Mobile-Node-Address<br />
This address has been specified as it is defined in RFC2486 Diameter Mobile IPv6 Application<br />
AVP code: 0xfff00001 /* TBD in the draft */<br />
Type: IPAddress<br />
Length: 24 (28 with bit V enabled) /* 16 (IPv6 Addr) + 8 (12) (AVP Header) */<br />
Contains: Mobile's Node Home Address<br />
MIPv6 -Home-Agent-Address<br />
This is optional since a Home Agent can be assigned automatically. This also defined in RFC 2486<br />
Diameter Mobile IPv6 Application<br />
AVP code: 0xfff00002 /* TBD in the draft */<br />
Type: IPAddress<br />
Length: 24 (28 with bit V enabled) /* 16 (IPv6 Addr) + 8 (12) (AVP Header) */<br />
Contains: Mobile's Node Home Agent AddressA<br />
MIP-Binding-Update<br />
The Home Registration as defined in RFC2486. This is optional because it is used only in the scenario in<br />
which mobile IP and AAA signalling are combined<br />
AVP code: 0xfff00003 /* TBD in the draft */<br />
Type: OctetString<br />
Length: Variable<br />
Contains: Mobile's Node Home Registration message<br />
MN-DH-PV<br />
Defined by <strong>Moby</strong> <strong>Dick</strong>. AVP containing the public value of the MN's Diffie -Hellman key<br />
AVP code: 0xfff00500<br />
Type: OctetString<br />
Length: 128 ( 132 when V is set )<br />
Contains: public value of the MN's Diffie-Hellman key<br />
MN-MAC<br />
Defined by <strong>Moby</strong> <strong>Dick</strong><br />
AVP code: 0xfff00004<br />
Type: OctetString<br />
Length: 16 ( 20 when V is set )<br />
Contains: HMAC-MD5 over the following AVPs:<br />
{Challenge }, { User-Name }, { MIPv6-Mobile-Node-Address }<br />
{ MIPv6-Home-Agent-Address }, { MIP-Binding-Update }<br />
the HMAC-MD5 is computed using SK[MN-AAAC.h]<br />
4.5.2.9.2 Attendant to AAAC.f<br />
Once the Attendant has received the UDP packets containing the AAA messages, it will send all the<br />
upstream messages using Diameter (i.e. over TCP / SCTP).<br />
D0103v1.doc 115 / 168