Network Working Group P. Calhoun Request for Comments: 5417 Cisco Systems, Inc. Category: Standards Track March 2009
Network Working Group P. Calhoun Request for Comments: 5417 Cisco Systems, Inc. Category: Standards Track March 2009
Control And Provisioning of Wireless Access Points (CAPWAP) Access Controller DHCP Option
控制和设置无线接入点(CAPWAP)接入控制器DHCP选项
Status of This Memo
关于下段备忘
This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.
本文件规定了互联网社区的互联网标准跟踪协议,并要求进行讨论和提出改进建议。有关本协议的标准化状态和状态,请参考当前版本的“互联网官方协议标准”(STD 1)。本备忘录的分发不受限制。
Copyright Notice
版权公告
Copyright (c) 2009 IETF Trust and the persons identified as the document authors. All rights reserved.
版权所有(c)2009 IETF信托基金和确定为文件作者的人员。版权所有。
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents in effect on the date of publication of this document (http://trustee.ietf.org/license-info). Please review these documents carefully, as they describe your rights and restrictions with respect to this document.
本文件受BCP 78和IETF信托在本文件出版之日生效的与IETF文件有关的法律规定的约束(http://trustee.ietf.org/license-info). 请仔细阅读这些文件,因为它们描述了您对本文件的权利和限制。
This document may contain material from IETF Documents or IETF Contributions published or made publicly available before November 10, 2008. The person(s) controlling the copyright in some of this material may not have granted the IETF Trust the right to allow modifications of such material outside the IETF Standards Process. Without obtaining an adequate license from the person(s) controlling the copyright in such materials, this document may not be modified outside the IETF Standards Process, and derivative works of it may not be created outside the IETF Standards Process, except to format it for publication as an RFC or to translate it into languages other than English.
本文件可能包含2008年11月10日之前发布或公开的IETF文件或IETF贡献中的材料。控制某些材料版权的人员可能未授予IETF信托允许在IETF标准流程之外修改此类材料的权利。在未从控制此类材料版权的人员处获得充分许可的情况下,不得在IETF标准流程之外修改本文件,也不得在IETF标准流程之外创建其衍生作品,除了将其格式化以RFC形式发布或将其翻译成英语以外的其他语言。
Abstract
摘要
The Control And Provisioning of Wireless Access Points Protocol allows a Wireless Termination Point to use DHCP to discover the Access Controllers to which it is to connect. This document describes the DHCP options to be used by the CAPWAP Protocol.
无线接入点协议的控制和配置允许无线终端点使用DHCP来发现它要连接的接入控制器。本文档介绍CAPWAP协议使用的DHCP选项。
Table of Contents
目录
1. Introduction ....................................................2 1.1. Conventions Used in This Document ..........................2 1.2. Terminology ................................................2 2. CAPWAP AC DHCPv4 Option .........................................2 3. CAPWAP AC DHCPv6 Option .........................................3 4. IANA Considerations .............................................5 5. Security Considerations .........................................5 6. Acknowledgments .................................................5 7. References ......................................................5 7.1. Normative References .......................................5 7.2. Informative References .....................................6
1. Introduction ....................................................2 1.1. Conventions Used in This Document ..........................2 1.2. Terminology ................................................2 2. CAPWAP AC DHCPv4 Option .........................................2 3. CAPWAP AC DHCPv6 Option .........................................3 4. IANA Considerations .............................................5 5. Security Considerations .........................................5 6. Acknowledgments .................................................5 7. References ......................................................5 7.1. Normative References .......................................5 7.2. Informative References .....................................6
The Control And Provisioning of Wireless Access Points Protocol (CAPWAP) [RFC5415] allows a Wireless Termination Point (WTP) to use DHCP to discover the Access Controllers (AC) to which it is to connect.
无线接入点协议(CAPWAP)[RFC5415]的控制和供应允许无线终端点(WTP)使用DHCP来发现其要连接的接入控制器(AC)。
Prior to the CAPWAP Discovery process, the WTP may use one of many methods to identify the proper AC with which to establish a CAPWAP connection. One of these methods is through the DHCP protocol. This is done through the CAPWAP AC DHCPv4 or CAPWAP AC DHCPv6 Option.
在CAPWAP发现过程之前,WTP可以使用多种方法中的一种来识别用于建立CAPWAP连接的适当AC。其中一种方法是通过DHCP协议。这是通过CAPWAP AC DHCPv4或CAPWAP AC DHCPv6选项完成的。
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119].
本文件中的关键词“必须”、“不得”、“要求”、“应”、“不应”、“应”、“不应”、“建议”、“可”和“可选”应按照RFC 2119[RFC2119]中所述进行解释。
This document uses terminology defined in [RFC3753], [RFC2131], [RFC3315], and [RFC5415].
本文件使用[RFC3753]、[RFC2131]、[RFC3315]和[RFC5415]中定义的术语。
This section defines a DHCPv4 option that carries a list of 32-bit (binary) IPv4 addresses indicating one or more CAPWAP ACs available to the WTP.
本节定义了DHCPv4选项,该选项携带32位(二进制)IPv4地址列表,指示WTP可用的一个或多个CAPWAP AC。
The DHCPv4 option for CAPWAP has the format shown in the following figure:
CAPWAP的DHCPv4选项的格式如下图所示:
0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | option-code | option-length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + AC IPv4 Address + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | option-code | option-length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + AC IPv4 Address + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
option-code: OPTION_CAPWAP_AC_V4 (138)
选项代码:选项CAPWAP\U AC\U V4(138)
option-length: Length of the 'options' field in octets; MUST be a multiple of four (4).
选项长度:“选项”字段的长度(以八位字节为单位);必须是四(4)的倍数。
AC IPv4 Address: IPv4 address of a CAPWAP AC that the WTP may use. The ACs are listed in the order of preference for use by the WTP.
AC IPv4地址:WTP可能使用的CAPWAP AC的IPv4地址。ACs按WTP使用的优先顺序列出。
A DHCPv4 client, acting on behalf of a CAPWAP WTP, MUST request the CAPWAP AC DHCPv4 Option in a Parameter Request List Option, as described in [RFC2131] and [RFC2132].
代表CAPWAP WTP的DHCPv4客户端必须在参数请求列表选项中请求CAPWAP AC DHCPv4选项,如[RFC2131]和[RFC2132]中所述。
A DHCPv4 server returns the CAPWAP AC Option to the client if the server policy is configured appropriately and the server is configured with a list of CAPWAP AC addresses.
如果服务器策略配置正确并且服务器配置了CAPWAP AC地址列表,则DHCPv4服务器将CAPWAP AC选项返回给客户端。
A CAPWAP WTP, acting as a DHCPv4 client, receiving the CAPWAP AC DHCPv4 Option MAY use the (list of) IP address(es) to locate an AC. The CAPWAP Protocol [RFC5415] provides guidance on the WTP's discovery process.
作为DHCPv4客户端接收CAPWAP AC DHCPv4选项的CAPWAP WTP可使用(列表)IP地址定位AC。CAPWAP协议[RFC5415]提供WTP发现过程的指导。
The WTP, acting as a DHCPv4 client, SHOULD try the records in the order listed in the CAPWAP AC DHCPv4 Option received from the DHCPv4 server.
作为DHCPv4客户端的WTP应按照从DHCPv4服务器接收的CAPWAP AC DHCPv4选项中列出的顺序尝试记录。
This section defines a DHCPv6 option that carries a list of 128-bit (binary) IPv6 addresses indicating one or more CAPWAP ACs available to the WTP.
本节定义了DHCPv6选项,该选项包含128位(二进制)IPv6地址列表,指示WTP可用的一个或多个CAPWAP ACs。
The DHCPv6 option for CAPWAP has the format shown in the following figure:
CAPWAP的DHCPv6选项的格式如下图所示:
0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | option-code | option-length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + AC IPv6 Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | .... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | option-code | option-length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | + + | | + AC IPv6 Address + | | + + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | .... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
option-code: OPTION_CAPWAP_AC_V6 (52)
选项代码:选项CAPWAP\U AC\U V6(52)
option-length: Length of the 'options' field in octets; MUST be a multiple of sixteen (16).
选项长度:“选项”字段的长度(以八位字节为单位);必须是十六(16)的倍数。
AC IPv6 Address: IPv6 address of a CAPWAP AC that the WTP may use. The ACs are listed in the order of preference for use by the WTP.
AC IPv6地址:WTP可能使用的CAPWAP AC的IPv6地址。ACs按WTP使用的优先顺序列出。
A DHCPv6 client, acting on behalf of a CAPWAP WTP, MUST request the CAPWAP AC DHCPv6 Option in a Parameter Request List Option, as described in [RFC3315].
代表CAPWAP WTP的DHCPv6客户端必须在参数请求列表选项中请求CAPWAP AC DHCPv6选项,如[RFC3315]中所述。
A DHCPv6 server returns the CAPWAP AC Option to the client if the server policy is configured appropriately and the server is configured with a list of CAPWAP AC addresses.
如果服务器策略配置正确并且服务器配置了CAPWAP AC地址列表,则DHCPv6服务器将CAPWAP AC选项返回给客户端。
A CAPWAP WTP, acting as a DHCPv6 client, receiving the CAPWAP AC DHCPv6 Option MAY use the (list of) IP address(es) to locate an AC. The CAPWAP Protocol [RFC5415] provides guidance on the WTP's discovery process.
作为DHCPv6客户端接收CAPWAP AC DHCPv6选项的CAPWAP WTP可使用(列表)IP地址定位AC。CAPWAP协议[RFC5415]提供WTP发现过程的指导。
The WTP, acting as a DHCPv6 client, SHOULD try the records in the order listed in the CAPWAP AC DHCPv6 Option received from the DHCPv6 server.
作为DHCPv6客户端的WTP应按照从DHCPv6服务器接收的CAPWAP AC DHCPv6选项中列出的顺序尝试记录。
The following DHCPv4 option code for CAPWAP AC Options has been assigned by IANA:
IANA为CAPWAP AC选项分配了以下DHCPv4选项代码:
Option Name Value Described in ----------------------------------------------- OPTION_CAPWAP_AC_V4 138 Section 2
Option Name Value Described in ----------------------------------------------- OPTION_CAPWAP_AC_V4 138 Section 2
The following DHCPv6 option code for CAPWAP AC Options has been assigned by IANA:
IANA为CAPWAP AC选项分配了以下DHCPv6选项代码:
Option Name Value Described in ------------------------------------------------ OPTION_CAPWAP_AC_V6 52 Section 3
Option Name Value Described in ------------------------------------------------ OPTION_CAPWAP_AC_V6 52 Section 3
The security considerations in [RFC2131], [RFC2132], and [RFC3315] apply. If an adversary manages to modify the response from a DHCP server or insert its own response, a WTP could be led to contact a rogue CAPWAP AC, possibly one that then intercepts call requests or denies service. CAPWAP's use of Datagram Transport Layer Security (DTLS) MUST be used to authenticate the CAPWAP peers in the establishment of the session.
[RFC2131]、[RFC2132]和[RFC3315]中的安全注意事项适用。如果对手设法修改来自DHCP服务器的响应或插入自己的响应,WTP可能会被引导与流氓CAPWAP AC联系,后者可能会拦截呼叫请求或拒绝服务。CAPWAP使用数据报传输层安全性(DTLS)必须用于在会话建立过程中对CAPWAP对等方进行身份验证。
In most of the networks, the DHCP exchange that delivers the options prior to network access authentication is neither integrity protected nor origin authenticated. Therefore, in security sensitive environments, the options defined in this document SHOULD NOT be the only methods used to determine to which AC a WTP should connect. The CAPWAP protocol [RFC5415] defines other AC discovery procedures a WTP MAY utilize.
在大多数网络中,在网络访问身份验证之前提供选项的DHCP交换既没有完整性保护,也没有原始身份验证。因此,在安全敏感环境中,本文档中定义的选项不应是确定WTP应连接到哪个AC的唯一方法。CAPWAP协议[RFC5415]定义了WTP可以利用的其他AC发现过程。
The following individuals are acknowledged for their contributions to this protocol specification: Ralph Droms, Margaret Wasserman.
以下个人因其对本协议规范的贡献而受到表彰:拉尔夫·德罗姆斯、玛格丽特·瓦瑟曼。
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2119]Bradner,S.,“RFC中用于表示需求水平的关键词”,BCP 14,RFC 2119,1997年3月。
[RFC2131] Droms, R., "Dynamic Host Configuration Protocol", RFC 2131, March 1997.
[RFC2131]Droms,R.,“动态主机配置协议”,RFC21311997年3月。
[RFC2132] Alexander, S. and R. Droms, "DHCP Options and BOOTP Vendor Extensions", RFC 2132, March 1997.
[RFC2132]Alexander,S.和R.Droms,“DHCP选项和BOOTP供应商扩展”,RFC 21321997年3月。
[RFC3315] Droms, R., Bound, J., Volz, B., Lemon, T., Perkins, C., and M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", RFC 3315, July 2003.
[RFC3315]Droms,R.,Bound,J.,Volz,B.,Lemon,T.,Perkins,C.,和M.Carney,“IPv6的动态主机配置协议(DHCPv6)”,RFC3315,2003年7月。
[RFC5415] Montemurro, M., Stanley, D., and P. Calhoun, "CAPWAP Protocol Specification", RFC 5415, March 2009.
[RFC5415]Montemurro,M.,Stanley,D.,和P.Calhoun,“CAPWAP协议规范”,RFC 54152009年3月。
[RFC3753] Manner, J. and M. Kojo, "Mobility Related Terminology", RFC 3753, June 2004.
[RFC3753]Way,J.和M.Kojo,“机动性相关术语”,RFC 3753,2004年6月。
Author's Address
作者地址
Pat R. Calhoun Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134
Pat R.Calhoun Cisco Systems,Inc.加利福尼亚州圣何塞市西塔斯曼大道170号,邮编95134
Phone: +1 408-902-3240 EMail: pcalhoun@cisco.com
Phone: +1 408-902-3240 EMail: pcalhoun@cisco.com