eap Mailing List: Re: Re: AMSKs for MIPv6

[Jari Arkko (jari.arkko]

Julien Bournelle wrote:

> the scenario that I had in mind is the one described by gerardo. We
> have an authentication for network access using EAP. We derive an AMSK
> for mip6. Then the mobile obtains an home agent and runs IKEv2. But
> we'd like to use psk for authentication instead of EAP in the IKEv2
> exchange. In this case, while recieving the third message of IKEv2 with
> AUTH payload (the MN uses the AMSK-mip6 or key derived from AMSK-mip6
> as psk), the HA requests the key to the AAA.
>  
But is the reason to use PSK instead of EAP solely an
optimization issue, or are there roaming limitations
or somethat actually prevents the use of EAP?

As I mentioned in my original post, I'm not at all
convinced that we need to spend a lot of effort
optimizing the bootstrap procedure, if it already
works with existing protocols.

> Other services such as FMIPv6 may benefit from such a mechanism based
> on AMSK.
>  
Maybe. Can you expand on why they would benefit?

--Jari