RE: DHCP vs. RA... again.

["Tony Hain" <alh-ietf@tndh.net>]

james woodyatt wrote:
> ...
> Are the network operators who are expressing "the specific
> requirement" that their network not "depend on RA" willing to accept
> that they still need RA to signal nodes that DHCP is required for
> obtaining prefix information and default router addresses?
> 
> Or, do they want RA deprecated completely?  If they do, then I
> wouldn't like that.


To shorten a long debate, the deployment models for not using RA are
fundamentally broken to start with. They are based on the concept that an RA
would result in a shared prefix between customers, because they are not
taking the step to do L2 isolation between the aggregation point and the
customer base. On top of that the security model is wrapped up in using DHCP
as their trust anchor (never mind that spoofing a mac blows this away). 

It is perfectly fine for the DHC wg to provide the tools for these operators
to deploy the way they want to. It is not reasonable for those operators to
drive their broken deployment model on the rest of the world by insisting
that DHCP is 'the only tool'. For them the RA should indicate 'use DHCP',
while for the rest of the world the RA should indicate the DNS server so
that DHCP is not required.

Tony