performed binding

advertisement
8.3. PMIP Tunnel Operation with Multiple Binding
Error! Reference source not found. through xx-4 illustrates an example call flow for
PMIPv4 tunneling operation with multiple binding.
8.3.1 PMIP Tunnel Operation for Initial Power Up
Figure 1 shows PMIP multiple binding updates for initial power up.
AT
eBS1
eBS2
SRNC
AGW
VAAA
(Proxy)
1. Successful Access Authentication and Authorization
1'. SRNC
Receives PMNAN-RK1
2. IOS Signaling
(eBS1 receives PMN-AN-HA1 Key
and seq 1 from SRNC)
3. Link ID
4. AT Presents
Link ID to Upper
Layer
5. DAP Move Req
6. PMIP RRQ [NAI , GRE Extension (set to all zero),
eBS 1 IP address, MN-HA Authentication,
Binding Type Extension (RL+ Primary Binding)]
7. PMIP RRP (GRE Key, MN-HA
Authentication)
8. DAP
Assignment
9. IOS Signaling
10. IP Address Assignment
Figure 1
PMIP Tunnel Operation with Initial Power Up
The steps in Figure 1 are described below.
1.
The AT, SRNC, AGW, and AAA perform successful access authentication and
authorization as same as step 1 specified in section 8.2.
8.3 PMIP Tunnel Operation with Multiple Binding
1
Error! No text of specified style in document.
Error! No text of specified style in document.
HAAA
2.
The eBS and SRNC performs IOS signaling exchanges in which the SRNC sends
AGW IP Address, User Name, AAA-Session-ID, and PMN-AN-HA1 key derived
from PMN-AN-RK1 to the eBS1. The sequence number (Seq1)is also sent from the
SRNC to eBS1 (used for calculating PMN-AN-HA1 key in AGW.) (See Error!
Reference source not found. for the details.)
3.
The eBS1 presents link ID to the AT. The link ID represents the IP interface that the
AT creates to talk to IP layer.
4.
The AT presents the link ID to the upper IP layer. The upper IP layer compares the
link ID with its current link ID. If it is different, it triggers IP Address assignment.
5.
This step is optional. For AT assisted DAP move, the AT sends DAP Move Request
to the eBS1.
6.
Since the eBS1 doesn’t have GRE key, the eBS1 sends PMIP RRQ (see RFC
PMIPv4 draft) to the AGW which includes GRE extension (set to all zero), eBS1 IP
address, NAI (formatted as AAA-Session-ID@Realm, where AAA-Session-ID is
received from SRNC at step 2, and Realm is the Realm portion of User Name
received from SRNC at step 2), and MN-HA authentication extension calculated by
using PMN-AN-HA1 key received from step 2. In the MN-HA Authentication
extension, the SPI field contains the sequence number as specified in [4].. In the
PMIP RRQ, Binding Type Extension is also included to indicate this PMIP Binding
is for RL + Primary binding.
7.
The AGW verifies MN-HA Auth extension by using PMN-AN-HA1 key (PMN-ANHA1 Key = HMAC-SHA-256(PMN-AN-RK1, “Derived PMIP Key”, Seq1, eBS1 IP
Address, AGW IP Address). If authentication passes, the AGW selects a GRE key
associated with this NAI and includes it through GRE extension (see RFC GRE
Extension draft) in the PMIP RRP sent to the eBS1. Since PMIP RRQ includes
Binding Type Extension with RL and Primary indication, the AGW can send and
receive packets to and from the eBS1.
8.
This step is optional. It occurs if the step 5 is performed. The eBS1 sends DAP
Assignment to the AT.
9.
The eBS1 sends DAP notification to SRNC and other eBSes in the route set through
IOS signaling (see Error! Reference source not found. for the details.)
10. The AGW and AT performs IP address assignment if AT request for it. (See IP
address assignment call flow.)
8.3.2 PMIP Tunnel Operation for Subsequent Route Adding or Connection
Setup (Scenario 1)
Figure 2 shows PMIP multiple binding updates for subsequent route adding and DAP move.
The same call flow also applies when the AT comes from idle state and setup a connection
with the eBS2. This call flow shows RL binding and Primary binding in different steps.
Error! No text of specified style in document.
Error! No text of specified style in document.
2
8.3 PMIP Tunnel Operation with Multiple Binding
AT
eBS1
eBS2
SRNC
AGW
VAAA
(Proxy)
HAAA
1. Route Open Request
2. IOS Signaling
(eBS2 receives GRE,
PMN-AN-HA1 Key and
seq 2 from SRNC)
3. PMIP RRQ [NAI, eBS2 IP address, GRE Key, MN-HA
Authentication, Binding Type Extension (RL)]
4. PMIP RRP (GRE Key, MN-HA Authentication)
5. Route Open Accept
(Link ID)
6. DAP Move Req
7. PMIP RRQ [NAI, eBS2 IP address, GRE Key, MNHA Authentication]
9. DAP Assignment
8. PMIP RRP (GRE Key, MNHA Authentication)
10. IOS Signlaing
Figure 2
PMIP Tunnel Operation with Connection Setup or Route Adding (Scenario 1)
The steps in Figure 2 are described below.
1.
The AT sends Route Open Request to the eBS2.
2.
During IOS procedure, the eBS2 receives AGW IP address, User Name, AAASession-ID, GRE key, and PMN-AN-HA1 key and sequence (seq 2) from the SRNC.
(See Error! Reference source not found. for the details.)
3.
The eBS2 sends PMIP RRQ to the AGW including Binding Type Extension
indicating RL only in addition to BS2 IP address, NAI (formatted as AAA-SessionID@Realm, where AAA-Session-ID is received from SRNC at step 2, and Realm is
the Realm portion of User Name received from SRNC at step 2), GRE extension,
and MN-HA authentication extension. In the MN-HA Authentication extension, the
SPI field contains the sequence number as specified in [4].
4.
The AGW verifies MN-HA Auth extension by using PMN-AN-HA1 key (PMN-ANHA1 Key = HMAC-SHA-256(PMN-AN-R1, “Derived PMIP Key”, Seq2, eBS2 IP
Address, AGW IP Address). If authentication passes, the AGW sends the PMIP RRP
to the eBS2. Since PMIP RRQ includes RL Only Extension, the AGW can only
receive packets from the eBS2.
8.3 PMIP Tunnel Operation with Multiple Binding
3
Error! No text of specified style in document.
Error! No text of specified style in document.
5.
The eBS2 sends Route Open Accept to the AT. The link ID represents the IP
interface that the AT creates to talk to IP layer. It is assumed Link ID is unchanged
in this call flow.
6.
Sometimes later, the AT sends DAP Move Request to eBS2 requesting DAP
handoff. This step is optional and only is performed for AT assisted DAP move.
7.
The eBS2 sends PMIP RRQ to the AGW including NAI, GRE Key and eBS2 IP
address, and MN-HA authentication extension. In the MN-HA Authentication
extension, SPI field contains the sequence number as specified in [4].
8.
The AGW verifies MN-HA Auth extension by using PMN-AN-HA1 key (PMN-ANHA1 Key = HMAC-SHA-256(PMN-AN-RK1, “Derived PMIP Key”, Seq2, eBS2 IP
Address, AGW IP Address). If authentication passes, the AGW sends PMIP RRP to
the eBS2. Since PMIP RRQ in previous step doesn’t include Binding Type
Extension, the AGW treats it as primary binding and it can receive and send packets
from and to the eBS2. Please note if the other eBS(es) in the Route Set has
performed RL binding or RL+ Primary binding, the AGW treats other eBS(es) to be
RL binding only at this time.
9.
The eBS2 sends DAP Assignment to the AT. This step is optional and only is
performed for AT assisted DAP move.
10. The eBS2 sends DAP notification to SRNC and other eBSes in the Route Set
through IOS signaling (see Error! Reference source not found. for the details.)
8.3.3
PMIP Tunnel Operation for Subsequent Route Adding or Connection
Setup (Scenario 2)
Figure 3 shows PMIP multiple binding updates for subsequent route adding and DAP move.
The same call flow also applies when the AT comes from idle state and setup a connection
with the eBS2. This call flow shows RL binding and Primary binding in the same step for the
network initiated DAP move.
Error! No text of specified style in document.
Error! No text of specified style in document.
4
8.3 PMIP Tunnel Operation with Multiple Binding
AT
eBS1
eBS2
AGW
SRNC
VAAA
(Proxy)
HAAA
1. Route Open Request
2. IOS Signaling
(eBS2 receives session:
GRE Key, PMN-AN-HA
Key and seq from SRNC
etc)
3. Route Open Accept (Link ID)
4. PMIP RRQ [NAI , GRE Key, eBS2 IP Address,
MN-HA Authentication,
Binding Type Extension (RL+DAP)]
5. PMIP RRP (MN-HA
Authentication)
6. IOS Signaling
Figure 3
PMIP Tunnel Operation with Connection Setup or Route Adding (Scenario 2)
The steps in Figure 3 are described below.
1.
The AT sends a Route Open message to the eBS2.
2.
The eBS2 and SRNC performs IOS signaling exchanges in which the SRNC sends
session info including AGW IP address, User Name, AAA-Session-ID, GRE Key,
and PMN-AN-HA1 key derived from PMN-AN-RK1 to the eBS2. The sequence
number is also sent from the SRNC to eBS2 (used for calculating PMN-AN-HA1
key in AGW.) (See Error! Reference source not found. for the details.)
3.
The eBS2 sends Route Open Accept including link ID to the AT. The link ID
represents the IP interface that the AT creates to talk to IP layer. It is assumed Link
ID is unchanged in this call flow.
4.
The eBS2 sends PMIP RRQ (see RFC PMIPv4 draft) to the AGW which includes
eBS2 IP address, NAI (formatted as AAA-Session-ID@Realm, where AAA-SessionID is received from SRNC at step 2, and Realm is the Realm portion of User Name
received from SRNC at step 2), GRE extension received from step 2, and MN-HA
authentication extension calculated by using PMN-AN-HA1 key received from step
2. In the MN-HA Authentication extension, the SPI field contains the sequence
8.3 PMIP Tunnel Operation with Multiple Binding
5
Error! No text of specified style in document.
Error! No text of specified style in document.
number as specified in [4]. In the PMIP RRQ, Binding Type Extension is also
included to indicate this PMIP Binding is for both RL and Primary PMIP binding.
5.
The AGW verifies MN-HA Auth extension by using PMN-AN-HA1 key (PMN-ANHA1 Key = HMAC-SHA-256(PMN-AN-RK1, “Derived PMIP Key”, Seq2, eBS2 IP
Address, AGW IP Address). If authentication passes, the AGW sends the PMIP RRP
to the eBS2. Since PMIP RRQ includes RL Extension with RL and DAP indication,
the AGW can send and receive packets to and from the eBS2.
6.
The eBS2 sends DAP notification to SRNC and other eBSes in the route set through
IOS signaling (see Error! Reference source not found. for the details.)
8.3.4 PMIP Tunnel RL Deregistration
Figure 4 shows RL PMIP binding deregistration.
AT
eBS1
eBS2/
DAP
AGW
SRNC
VAAA
(Proxy)
HAAA
1. Both eBS1 and eBS2 is in Route
Set
2. AT Decides to
remove eBS1 from
the Route Set
3. Route Close
4. PMIP RRQ [NAI , GRE Key, eBS1 IP Address,
MN-HA Authentication,
Binding Type Extension (RL), Lifetime=0]
5. PMIP RRP (MN-HA
Authentication)
Figure 4
RL PMIP Deregistration
The steps in Figure 4 are described below.
1.
The eBS1 and eBS2 in the AT’s Route Set.
2.
The AT decides to remove the eBS1 from the Route Set.
3.
The AT sends Route Close to the eBS1.
4.
The eBS1 sends PMIP RRQ (see Error! Reference source not found.) with PMIP
lifetime set to 0 and Binding Type extension to the AGW to indicate this PMIP
Binding is for RL binding deregistration.
Error! No text of specified style in document.
Error! No text of specified style in document.
6
8.3 PMIP Tunnel Operation with Multiple Binding
5.
The AGW verifies MN-HA Auth extension. If authentication passes, the AGW sends
the PMIP RRP to the eBS1. Since PMIP RRQ includes RL Extension lifetime equal
to 0, the AGW stop receiving the packets from the eBS1.
8.3.6 U6-PMIP Deregistration
Figure 5 shows U6-PMIP binding deregistration. The U6-PMIP binding deregistration is
performed autonomously by the AGW, and is triggered when a U6-PMIP binding exists at
the AGW for an AT, and a new U1 PMIP or U6-PMIP registration request is accepted for that
AT.
AT
eBS1
eBS2
AGW
SRNC
VAAA
(Proxy)
HAAA
1. AT is in Idle state
2. U6-PMIP Binding
(Signaling Only)
3. AT Decides to
open a route
4. Route Open Request
5. IOS Signaling
(eBS2 receives session: GRE Key,
PMN-AN-HA1 Key and seq from
SRNC etc)
6. Route Open Accept (Link ID)
7. PMIP RRQ [Binding Type
Extension(RL+Primary)]
8. PMIP RRP (MN-HA Authentication)
9. U1 PMIP Binding (RL+Primary)
Figure 5
U6-PMIP Deregistration
The steps in Figure 5 are described below.
1.
AT is in the Idle state.
2.
A U6PMIP binding exists between the SRNC and AGW.
3.
The AT decides to open a route to eBS2.
8.3 PMIP Tunnel Operation with Multiple Binding
7
Error! No text of specified style in document.
Error! No text of specified style in document.
4.
The AT sends a Route Open Request to the eBS2.
5.
The eBS2 and SRNC exchange IOS signaling to establish a session for the AT.
6.
The eBS2 accepts the route open request and sends Link ID to AT.
7.
The eBS2 sends U1 PMIP RRQ with RL+Primary Binding Type extension to the
AGW.
8.
The AGW verifies MN-HA Auth extension. If authentication passes, the AGW sends
the successful PMIP RRP to the eBS2. Since PMIP RRP was successful, the AGW
autonomously revokes the U6-PMIP binding which existed in step 2.
9.
A U1 PMIP binding exists between AGW and eBS2.
Error! No text of specified style in document.
Error! No text of specified style in document.
8
8.3 PMIP Tunnel Operation with Multiple Binding
Download