RE: draft-ietf-v6ops-cpe-simple-security-04 WGLC

[<teemu.savolainen@nokia.com>]

Hi,

I believe this document is of operational utility. 

Few comments/questions:
- 3.2.2. describes, as per RFC4787, that UDP mappings MUST NOT expire in less than two minutes. As I don't know the backgrounds of this decision, I wonder why the minimum time could not be longer for IPv6? The longer the time the less need to activate radio for keep-alive sending (on either side of the firewall btw - consider a case where CPE has wireless WAN). In CGN case short timeout is understandable due need to save public ports, but that probably is not an issue in simple IPv6 firewall. So why e.g. not two hours as for TCP?
- 3.2.5. Just to check that DSMIP6 is considered as one of these other tunneling protocols mentioned in R22? How about MIP6 route optimization, will that work through a device implementing this specification?
- 3.4 says it remains to be seen if UPnP:IGD is to be extended for IPv6. I would rather say that IPv6 is being added to UPnP:IDG2. See: "http://www.upnp.org/resources/documents/UPnPIGD2vsIGD1d10032009.pdf  "UPnP Gateway committee: IGD:2 improvements over IGD:1"

Best regards,

	Teemu


>-----Original Message-----
>From: owner-v6ops@ops.ietf.org 
>[mailto:owner-v6ops@ops.ietf.org] On Behalf Of ext Fred Baker
>Sent: 15 April, 2009 18:27
>To: IPv6 Operations
>Cc: kurtis@kurtis.pp.se; rbonica@juniper.net
>Subject: draft-ietf-v6ops-cpe-simple-security-04 WGLC
>
>This is to initiate a two week working group last call of 
>draft-ietf- v6ops-cpe-simple-security-04. Please read it now. 
>If you find nits (spelling errors, minor suggested wording 
>changes, etc), comment to the authors; if you find greater 
>issues, such as disagreeing with a statement or finding 
>additional issues that need to be addressed, please post your 
>comments to the list.
>
>We are looking specifically for comments on the importance of 
>the document as well as its content. If you have read the 
>document and believe it to be of operational utility, that is 
>also an important comment to make.
>
>