1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
|
<pre>Internet Engineering Task Force (IETF) B. Joshi
Request for Comments: 6925 R. Desetti
Category: Standards Track Infosys Ltd.
ISSN: 2070-1721 M. Stapp
Cisco Systems, Inc.
April 2013
<span class="h1">The DHCPv4 Relay Agent Identifier Sub-Option</span>
Abstract
This document defines a new Relay Agent Identifier sub-option for the
Dynamic Host Configuration Protocol (DHCP) Relay Agent Information
option. The sub-option carries a value that uniquely identifies the
relay agent device within the administrative domain. The value is
normally administratively configured in the relay agent. The sub-
option allows a DHCP relay agent to include the identifier in the
DHCP messages it sends.
Status of This Memo
This is an Internet Standards Track document.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Further information on
Internet Standards is available in <a href="./rfc5741#section-2">Section 2 of RFC 5741</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="http://www.rfc-editor.org/info/rfc6925">http://www.rfc-editor.org/info/rfc6925</a>.
Copyright Notice
Copyright (c) 2013 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="http://trustee.ietf.org/license-info">http://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
<span class="grey">Joshi, et al. Standards Track [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
Table of Contents
<a href="#section-1">1</a>. Introduction ....................................................<a href="#page-2">2</a>
<a href="#section-2">2</a>. Terminology .....................................................<a href="#page-2">2</a>
<a href="#section-3">3</a>. Example Use Cases ...............................................<a href="#page-3">3</a>
<a href="#section-3.1">3.1</a>. Bulk Leasequery ............................................<a href="#page-3">3</a>
<a href="#section-3.2">3.2</a>. Industrial Ethernet ........................................<a href="#page-3">3</a>
<a href="#section-4">4</a>. Sub-Option Format ...............................................<a href="#page-4">4</a>
<a href="#section-5">5</a>. Identifier Stability ............................................<a href="#page-4">4</a>
<a href="#section-5.1">5.1</a>. Identifier Uniqueness ......................................<a href="#page-5">5</a>
<a href="#section-6">6</a>. Security Considerations .........................................<a href="#page-6">6</a>
<a href="#section-6.1">6.1</a>. Forged Relay ID Attacks ....................................<a href="#page-6">6</a>
<a href="#section-6.2">6.2</a>. Factory-Floor Scenario .....................................<a href="#page-6">6</a>
<a href="#section-7">7</a>. IANA Considerations .............................................<a href="#page-7">7</a>
<a href="#section-8">8</a>. Acknowledgments .................................................<a href="#page-7">7</a>
<a href="#section-9">9</a>. References ......................................................<a href="#page-7">7</a>
<a href="#section-9.1">9.1</a>. Normative References .......................................<a href="#page-7">7</a>
<a href="#section-9.2">9.2</a>. Informative References .....................................<a href="#page-8">8</a>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
The Dynamic Host Configuration Protocol for IPv4 (DHCPv4) [<a href="./rfc2131" title=""Dynamic Host Configuration Protocol"">RFC2131</a>]
provides IP addresses and configuration information for IPv4 clients.
It includes a relay agent capability, in which network elements
receive broadcast messages from clients and forward them to DHCP
servers as unicast messages. In many network environments, relay
agents add information to the DHCP messages before forwarding them,
using the Relay Agent Information option [<a href="./rfc3046" title=""DHCP Relay Agent Information Option"">RFC3046</a>]. Servers that
recognize the Relay Agent Information option echo it back in their
replies.
This specification introduces a Relay Agent Identifier (Relay-ID)
sub-option for the Relay Agent Information option. The Relay-ID sub-
option carries a sequence of octets that is intended to uniquely
identify the relay agent within the administrative domain. In this
document, an administrative domain consists of all DHCP servers and
relay agents that communicate with each other.
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. Terminology</span>
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
document are to be interpreted as described in [<a href="./rfc2119" title=""Key words for use in RFCs to Indicate Requirement Levels"">RFC2119</a>].
DHCPv4 terminology is defined in [<a href="./rfc2131" title=""Dynamic Host Configuration Protocol"">RFC2131</a>], and the DHCPv4 Relay
Agent Information option is defined in [<a href="./rfc3046" title=""DHCP Relay Agent Information Option"">RFC3046</a>].
<span class="grey">Joshi, et al. Standards Track [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. Example Use Cases</span>
<span class="h3"><a class="selflink" id="section-3.1" href="#section-3.1">3.1</a>. Bulk Leasequery</span>
There has been quite a bit of recent interest in extending the DHCP
Leasequery protocol [<a href="./rfc4388" title=""Dynamic Host Configuration Protocol (DHCP) Leasequery"">RFC4388</a>] to accommodate some additional
situations. [<a href="./rfc6926" title=""DHCPv4 Bulk Leasequery"">RFC6926</a>] proposes a variety of enhancements to the
existing Leasequery protocol. The document describes a use case
where a relay agent queries DHCP servers using the relay identifier
to retrieve all the leases allocated through the relay agent.
<span class="h3"><a class="selflink" id="section-3.2" href="#section-3.2">3.2</a>. Industrial Ethernet</span>
DHCP typically identifies clients based on information in their DHCP
messages, such as the Client-Identifier option or the value of the
chaddr field. In some networks, however, the location of a client --
its point of attachment to the network -- is a more useful
identifier. In factory-floor networks (commonly called 'industrial'
networks), for example, the role a device plays is often fixed and
based on its location. Using manual address configuration is
possible (and is common), but it would be beneficial if DHCP
configuration could be applied to these networks.
One way to provide connection-based identifiers for industrial
networks is to have the network elements acting as DHCP relay agents
supply information that a DHCP server could use as a client
identifier. A straightforward way to form identifier information is
to combine something that is unique within the scope of the network
element, such as a port/slot value, with something that uniquely
identifies that network element, such as a Relay Agent Identifier.
<span class="grey">Joshi, et al. Standards Track [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. Sub-Option Format</span>
Format of the Relay Agent Identifier sub-option:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|SUBOPT_RELAY_ID| length | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |
. .
. identifier (variable) .
. .
+---------------------------------------------------------------+
Where:
SUBOPT_RELAY_ID 12
length the number of octets in the sub-option
(excluding the sub-option ID and length fields);
the minimum length is one.
identifier the identifying data
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. Identifier Stability</span>
If the relay identifier is to be meaningful, it has to be stable. A
relay agent SHOULD use a single identifier value consistently. The
identifier used by a relay device SHOULD be committed to stable
storage, unless the relay device can regenerate the value upon
reboot.
If the Relay-ID configured in a relay agent is not unique within its
administrative domain, resource allocation problems may occur as the
DHCP server attempts to allocate the same resource to devices behind
two different relay agents. Therefore, a Relay-ID configured in a
relay agent MUST be unique within its administrative domain. To aid
in ensuring uniqueness of Relay-IDs, relay agents SHOULD make their
relay identifiers visible to their administrators via their user
interface, through a log entry, through a MIB field, or through some
other mechanism.
Implementors of relay agents should note that the identifier needs to
be present in all DHCP message types where its value is being used by
the DHCP server. The relay agent may not be able to add the Relay
Agent Information option to all messages, such as RENEW messages sent
as IP unicasts. In some deployments, that might mean that the server
has to be willing to continue to associate the relay identifier it
<span class="grey">Joshi, et al. Standards Track [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
has last seen with a lease that is being RENEWed. Other deployments
may prefer to use the Server Identifier Override sub-option [<a href="./rfc5107" title=""DHCP Server Identifier Override Suboption"">RFC5107</a>]
to permit the relay device to insert the Relay Agent Information
option into all relayed messages.
Handling situations where a relay agent device is replaced is another
aspect of stability. One of the use cases for the relay identifier
is to permit a server to associate clients' lease bindings with the
relay device connected to the clients. If the relay device is
replaced because it has failed or been upgraded, it may be desirable
for the new device to continue to provide the same relay identifier
as the old device. Therefore, if a relay agent supports Relay-ID,
the Relay-ID should be administratively configurable.
<span class="h3"><a class="selflink" id="section-5.1" href="#section-5.1">5.1</a>. Identifier Uniqueness</span>
It is strongly recommended that administrators take special care to
ensure that Relay-IDs configured in their relay agents are not
duplicated. There are a number of strategies that may be used to
achieve this.
Administrators may use a strategy to configure unique Relay-IDs. One
such strategy is that a Relay-ID on a relay agent may reuse an
existing identifier or set of identifiers that are already guaranteed
to be unique (e.g., Universally Unique Identifier (UUID) [<a href="./rfc4122" title=""A Universally Unique IDentifier (UUID) URN Namespace"">RFC4122</a>]).
For administrators who are already using a provisioning system to
manage their networking infrastructure, it may work to enumerate
relay agents on the basis of roles and then, as a second step, assign
those roles to specific relay agents or groups of relay agents. In
such a scenario, when a replacement relay agent is first seen by the
DHCP server, it could trigger a configuration event on the
provisioning system, and the new relay agent could be assigned to the
role of the relay agent it is replacing.
It may be that the DHCP server has configurable event notification
and that a duplicate Relay-ID would trigger this notification.
Administrators can take advantage of this feature to work out whether
the duplication is real and unintended or whether the original relay
agent is being replaced.
A network management/provisioning system may also be able to collect
a full list of all relay agents on the network. It may then notice
that more than one device reports the same Relay-ID. In such a case,
the provisioning system could notify the administrator of the fault,
which could then be corrected.
<span class="grey">Joshi, et al. Standards Track [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
This is not an exhaustive list of strategies. We suggest an
additional strategy in the Security Considerations section. If none
of these strategies will work, administrators are also encouraged to
consider the specifics of their own network configuration to see if
there is some way to detect duplicate Relay-IDs other than the ones
listed here.
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. Security Considerations</span>
<span class="h3"><a class="selflink" id="section-6.1" href="#section-6.1">6.1</a>. Forged Relay ID Attacks</span>
Security issues with the Relay Agent Information option and its use
by servers in address assignment are discussed in [<a href="./rfc3046" title=""DHCP Relay Agent Information Option"">RFC3046</a>] and
[<a href="./rfc4030" title=""The Authentication Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Option"">RFC4030</a>]. The DHCP Relay Agent Information option depends on a
trusted relationship between the DHCP relay agent and the DHCP
server, as described in <a href="./rfc3046#section-5">Section 5 of [RFC3046]</a>. While the
introduction of fraudulent DHCP Relay Agent Information options can
be prevented by a perimeter defense that blocks these options unless
the DHCP relay agent is trusted, a deeper defense using the
authentication sub-option for the DHCP Relay Agent Information option
[<a href="./rfc4030" title=""The Authentication Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Option"">RFC4030</a>] SHOULD be deployed as well. It also helps in avoiding
duplication of relay identifiers by malicious entities. However,
implementation of the authentication sub-option for the DHCP Relay
Agent Information option [<a href="./rfc4030" title=""The Authentication Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Option"">RFC4030</a>] is not a must to support the
Relay-ID sub-option.
<span class="h3"><a class="selflink" id="section-6.2" href="#section-6.2">6.2</a>. Factory-Floor Scenario</span>
One possible use case for the Relay-ID sub-option is the automated
configuration of machines on a factory floor. In this situation,
various sections of the factory floor might be on their own network
links with a relay agent interposed between those links and the DHCP
server. The Relay-ID of each relay agent might cause special
configurations to be downloaded to those devices to control their
behavior.
If a relay agent was deployed on the factory floor in such a
situation, with an incorrect Relay-ID, there is the potential that
devices could be misconfigured in a way that could produce incorrect
results, cause physical damage, or even create hazardous conditions
for workers.
In deployment scenarios like this one, administrators must use some
dependable technique to ensure that such misconfigurations do not
occur. It is beyond the scope of this document to provide a complete
list of such techniques.
<span class="grey">Joshi, et al. Standards Track [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
However, as an example, a relay agent device intended for use in such
a scenario could require the use of a hardware token that contains a
Relay-ID that is physically attached to the installation location of
the relay agent device and can be connected to and disconnected from
the relay agent device without the use of special tools. Such a
relay agent device should not be operable when this hardware token is
not connected to it: either it should fail because it presents an
unknown identifier to the DHCP server, or it should simply refuse to
relay DHCP packets until the token is connected to it.
A relay agent device that does not provide a clear mitigation
strategy for a scenario where misconfiguration could have damaging or
hazardous consequences should not be deployed in such a scenario.
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. IANA Considerations</span>
IANA has assigned a new sub-option code from the "DHCP Relay Agent
Sub-Option Codes" registry maintained at
<a href="http://www.iana.org/assignments/bootp-dhcp-parameters">http://www.iana.org/assignments/bootp-dhcp-parameters</a>.
Relay Agent Identifier Sub-Option 12
<span class="h2"><a class="selflink" id="section-8" href="#section-8">8</a>. Acknowledgments</span>
Thanks to Bernie Volz, David W. Hankins, Pavan Kurapati, and Ted
Lemon for providing valuable suggestions.
<span class="h2"><a class="selflink" id="section-9" href="#section-9">9</a>. References</span>
<span class="h3"><a class="selflink" id="section-9.1" href="#section-9.1">9.1</a>. Normative References</span>
[<a id="ref-RFC2119">RFC2119</a>] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc2119">RFC 2119</a>, March 1997.
[<a id="ref-RFC2131">RFC2131</a>] Droms, R., "Dynamic Host Configuration Protocol", <a href="./rfc2131">RFC</a>
<a href="./rfc2131">2131</a>, March 1997.
[<a id="ref-RFC3046">RFC3046</a>] Patrick, M., "DHCP Relay Agent Information Option", <a href="./rfc3046">RFC</a>
<a href="./rfc3046">3046</a>, January 2001.
[<a id="ref-RFC4030">RFC4030</a>] Stapp, M. and T. Lemon, "The Authentication Suboption for
the Dynamic Host Configuration Protocol (DHCP) Relay Agent
Option", <a href="./rfc4030">RFC 4030</a>, March 2005.
<span class="grey">Joshi, et al. Standards Track [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc6925">RFC 6925</a> The Relay Agent ID Sub-Option April 2013</span>
<span class="h3"><a class="selflink" id="section-9.2" href="#section-9.2">9.2</a>. Informative References</span>
[<a id="ref-RFC4122">RFC4122</a>] Leach, P., Mealling, M., and R. Salz, "A Universally
Unique IDentifier (UUID) URN Namespace", <a href="./rfc4122">RFC 4122</a>, July
2005.
[<a id="ref-RFC4388">RFC4388</a>] Woundy, R. and K. Kinnear, "Dynamic Host Configuration
Protocol (DHCP) Leasequery", <a href="./rfc4388">RFC 4388</a>, February 2006.
[<a id="ref-RFC5107">RFC5107</a>] Johnson, R., Kumarasamy, J., Kinnear, K., and M. Stapp,
"DHCP Server Identifier Override Suboption", <a href="./rfc5107">RFC 5107</a>,
February 2008.
[<a id="ref-RFC6926">RFC6926</a>] Kinnear, K., Stapp, M., Desetti, R., Joshi, B., Russell,
N., Kurapati, P., and B. Volz, "DHCPv4 Bulk Leasequery",
<a href="./rfc6926">RFC 6926</a>, April 2013.
Authors' Addresses
Bharat Joshi
Infosys Ltd.
44 Electronics City, Hosur Road
Bangalore 560 100
India
EMail: bharat_joshi@infosys.com
URI: <a href="http://www.infosys.com/">http://www.infosys.com/</a>
D.T.V Ramakrishna Rao
Infosys Ltd.
44 Electronics City, Hosur Road
Bangalore 560 100
India
EMail: ramakrishnadtv@infosys.com
URI: <a href="http://www.infosys.com/">http://www.infosys.com/</a>
Mark Stapp
Cisco Systems, Inc.
1414 Massachusetts Ave.
Boxborough, MA 01719
USA
Phone: +1 978 936 0000
EMail: mjs@cisco.com
Joshi, et al. Standards Track [Page 8]
</pre>
|
