1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557
|
<pre>Internet Engineering Task Force (IETF) N. Shen
Request for Comments: 8357 E. Chen
Category: Standards Track Cisco Systems
ISSN: 2070-1721 March 2018
<span class="h1">Generalized UDP Source Port for DHCP Relay</span>
Abstract
This document defines an extension to the DHCP protocols that allows
a relay agent to use any available source port for upstream
communications. The extension also allows inclusion of a DHCP option
that can be used to statelessly route responses back to the
appropriate source port on downstream communications.
Status of This Memo
This is an Internet Standards Track document.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Further information on
Internet Standards is available in <a href="./rfc7841#section-2">Section 2 of RFC 7841</a>.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
<a href="https://www.rfc-editor.org/info/rfc8357">https://www.rfc-editor.org/info/rfc8357</a>.
Copyright Notice
Copyright (c) 2018 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to <a href="https://www.rfc-editor.org/bcp/bcp78">BCP 78</a> and the IETF Trust's Legal
Provisions Relating to IETF Documents
(<a href="https://trustee.ietf.org/license-info">https://trustee.ietf.org/license-info</a>) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
<span class="grey">Shen & Chen Standards Track [Page 1]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-2" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
Table of Contents
<a href="#section-1">1</a>. Introduction . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-2">2</a>
<a href="#section-2">2</a>. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-3">3</a>
<a href="#section-2.1">2.1</a>. Requirements Language . . . . . . . . . . . . . . . . . . <a href="#page-3">3</a>
<a href="#section-2.2">2.2</a>. Definitions . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-3">3</a>
<a href="#section-3">3</a>. Changes to DHCP Specifications . . . . . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-3.1">3.1</a>. Additions to DHCPv4 in <a href="./rfc2131">RFC 2131</a> . . . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-3.2">3.2</a>. Additions to DHCPv6 in <a href="./rfc3315">RFC 3315</a> . . . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-4">4</a>. Relay Source Port Sub-option and Option . . . . . . . . . . . <a href="#page-4">4</a>
<a href="#section-4.1">4.1</a>. Source Port Sub-option for DHCPv4 . . . . . . . . . . . . <a href="#page-5">5</a>
<a href="#section-4.2">4.2</a>. Relay Source Port Option for DHCPv6 . . . . . . . . . . . <a href="#page-5">5</a>
<a href="#section-5">5</a>. Relay Agent and Server Behavior . . . . . . . . . . . . . . . <a href="#page-6">6</a>
<a href="#section-5.1">5.1</a>. DHCPv4 . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-6">6</a>
<a href="#section-5.2">5.2</a>. DHCPv6 . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-6">6</a>
<a href="#section-5.3">5.3</a>. Compatibility . . . . . . . . . . . . . . . . . . . . . . <a href="#page-7">7</a>
<a href="#section-5.4">5.4</a>. Deployment Considerations . . . . . . . . . . . . . . . . <a href="#page-7">7</a>
<a href="#section-6">6</a>. Example of an IPv6-Cascaded Relay . . . . . . . . . . . . . . <a href="#page-7">7</a>
<a href="#section-7">7</a>. IANA Considerations . . . . . . . . . . . . . . . . . . . . . <a href="#page-9">9</a>
<a href="#section-8">8</a>. Security Considerations . . . . . . . . . . . . . . . . . . . <a href="#page-9">9</a>
<a href="#section-9">9</a>. Normative References . . . . . . . . . . . . . . . . . . . . <a href="#page-9">9</a>
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-10">10</a>
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . <a href="#page-10">10</a>
<span class="h2"><a class="selflink" id="section-1" href="#section-1">1</a>. Introduction</span>
<a href="./rfc2131">RFC 2131</a> [<a href="./rfc2131" title=""Dynamic Host Configuration Protocol"">RFC2131</a>] and <a href="./rfc3315">RFC 3315</a> [<a href="./rfc3315" title=""Dynamic Host Configuration Protocol for IPv6 (DHCPv6)"">RFC3315</a>] specify the use of UDP as
the transport protocol for DHCP. They also define both the server-
and client-side port numbers. The IPv4 server port is UDP number
(67) and the client port is UDP number (68); for IPv6, the server
port is (547) and the client port is (546).
The fixed UDP port combinations for the DHCP protocol scheme creates
challenges in certain DHCP relay operations. For instance, in a
large-scale DHCP relay implementation on a single-switch node, the
DHCP relay functionality may be partitioned among multiple relay
processes. All of these DHCP relay processes may share the same IP
address of the switch node. If the UDP source port has to be a fixed
number as currently specified, the transport socket operation of DHCP
packets would need to go through a central entity or process, which
would defeat the purpose of distributing DHCP relay functionality.
In some large-scale deployments, the decision to split the DHCP
functionality into multiple processes on a node may not be purely
based on DHCP relay computational load. Rather, DHCP relay could
just be one of the functions in a multi-process implementation.
<span class="grey">Shen & Chen Standards Track [Page 2]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-3" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
Although assigning a different IPv4/IPv6 source address for each DHCP
relay process can be a solution, this would introduce operational and
network management complexities, especially given the scarceness of
IPv4 addresses.
This document defines an extension to relax the fixed UDP source port
requirement for the DHCP relay agents. This extension requires a
DHCP server to remember the inbound packet's UDP port number along
with the IPv4/IPv6 address. When sending back replies, the DHCP
server MUST use the UDP port number that the incoming relay agent
uses instead of the fixed DHCP port number. In the case of
IPv6-cascaded relay agents [<a href="./rfc3315" title=""Dynamic Host Configuration Protocol for IPv6 (DHCPv6)"">RFC3315</a>], the upstream relay agent needs
to use the "Relay Source Port Option" to record the downstream source
port, and it MUST use this recorded port number instead of the fixed
DHCP port number when replaying the reply messages.
<span class="h2"><a class="selflink" id="section-2" href="#section-2">2</a>. Terminology</span>
<span class="h3"><a class="selflink" id="section-2.1" href="#section-2.1">2.1</a>. Requirements Language</span>
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document are to be interpreted as described in
<a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a> [<a href="./rfc2119" title=""Key words for use in RFCs to Indicate Requirement Levels"">RFC2119</a>] [<a href="./rfc8174" title=""Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words"">RFC8174</a>] when, and only when, they appear in all
capitals, as shown here.
<span class="h3"><a class="selflink" id="section-2.2" href="#section-2.2">2.2</a>. Definitions</span>
Downstream Device: In the DHCP relay context, this refers to the
next relay agent that forwards Relay-reply messages.
Upstream Device: In the DHCP relay context, this refers to the next
relay agent or DHCP server that forwards Relay-forward messages.
Relay Source Port: This is the UDP port that a relay agent uses to
receive Relay-forward messages from an upstream device.
Downstream Source Port: This is the UDP port that the downstream
device uses when forwarding Relay-forward messages to this relay
agent device. This UDP port is to be used by this relay agent
device when forwarding the Relay-reply messages to that downstream
device.
Non-DHCP UDP Port: Any valid and non-zero UDP port other than port
67 for DHCPv4 and port 547 for DHCPv6.
<span class="grey">Shen & Chen Standards Track [Page 3]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-4" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
<span class="h2"><a class="selflink" id="section-3" href="#section-3">3</a>. Changes to DHCP Specifications</span>
<span class="h3"><a class="selflink" id="section-3.1" href="#section-3.1">3.1</a>. Additions to DHCPv4 in <a href="./rfc2131">RFC 2131</a></span>
<a href="./rfc2131#section-4.1">Section 4.1 of RFC 2131</a> [<a href="./rfc2131" title=""Dynamic Host Configuration Protocol"">RFC2131</a>] specifies that:
DHCP uses UDP as its transport protocol. DHCP messages from a
client to a server are sent to the 'DHCP server' port (67), and
DHCP messages from a server to a client are sent to the 'DHCP
client' port (68).
Relay agents implementing this specification may be configured
instead to 1) use a source port number other than 67 when relaying
messages toward servers and 2) receive responses toward clients on
that same port. This will only work when the DHCP server or relay
agent to which such a relay agent is forwarding messages is upgraded
to support this extension.
<span class="h3"><a class="selflink" id="section-3.2" href="#section-3.2">3.2</a>. Additions to DHCPv6 in <a href="./rfc3315">RFC 3315</a></span>
<a href="./rfc3315#section-5.2">Section 5.2 of RFC 3315</a> [<a href="./rfc3315" title=""Dynamic Host Configuration Protocol for IPv6 (DHCPv6)"">RFC3315</a>] specifies that:
Clients listen for DHCP messages on UDP port 546. Servers and
relay agents listen for DHCP messages on UDP port 547.
Relay agents implementing this specification may be configured
instead to 1) use a source port number other than 547 when relaying
messages toward servers and 2) receive responses toward clients on
that same port. This will only work when the DHCP server or relay
agent to which such a relay agent is forwarding messages is upgraded
to support this extension.
<span class="h2"><a class="selflink" id="section-4" href="#section-4">4</a>. Relay Source Port Sub-option and Option</span>
Relay agents do not maintain state. To return a message to its
source, the relay agent must include all the required information in
the Relay-forward message. When a relay in a sequence of cascaded
relays does not use the standard source port, that source port must
be included along with the source address. This option allows the
relay agent to do so.
<span class="grey">Shen & Chen Standards Track [Page 4]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-5" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
<span class="h3"><a class="selflink" id="section-4.1" href="#section-4.1">4.1</a>. Source Port Sub-option for DHCPv4</span>
The relay agent "Source Port Sub-option" is a new option, and it is
part of the "Relay Agent Information" option for DHCPv4 [<a href="./rfc3046" title=""DHCP Relay Agent Information Option"">RFC3046</a>].
The format of the "Source Port Sub-option" is shown below:
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| SubOpt Code | Len |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Where:
SubOpt Code: SUBOPT_RELAY_PORT. 8-bit value, 19.
Len: 8-bit value to be set to 0.
<span class="h3"><a class="selflink" id="section-4.2" href="#section-4.2">4.2</a>. Relay Source Port Option for DHCPv6</span>
The "Relay Source Port Option" is a new DHCPv6 option. It MUST be
used by either 1) a DHCPv6 relay agent that uses a non-DHCP UDP port
(not 547) communicating with the IPv6 server and the upstream relay
agent or 2) an IPv6 relay agent that detects the use of a non-DHCP
UDP port (not 547) by a downstream relay agent.
The format of the "Relay Source Port Option" is shown below:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| OPTION_RELAY_PORT | Option-Len |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Downstream Source Port |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Where:
Option-Code: OPTION_RELAY_PORT. 16-bit value, 135.
Option-Len: 16-bit value to be set to 2.
Downstream Source Port: 16-bit value. To be set by the IPv6 relay
either to the downstream relay agent's UDP source port used for
the UDP packet, or to zero if only the local relay agent uses the
non-DHCP UDP port (not 547).
<span class="grey">Shen & Chen Standards Track [Page 5]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-6" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
<span class="h2"><a class="selflink" id="section-5" href="#section-5">5</a>. Relay Agent and Server Behavior</span>
<span class="h3"><a class="selflink" id="section-5.1" href="#section-5.1">5.1</a>. DHCPv4</span>
When a relay agent uses a non-DHCP UDP port (not 67) to communicate
with the DHCP server, it MUST include the "Source Port Sub-option" in
Relay-forward messages to indicate that.
When an IPv4 server receives a message from a relay agent with the
"Source Port Sub-option", it MUST remember the UDP source port of the
message and use that port number as the UDP destination port when
sending the reply message to the same relay agent.
<span class="h3"><a class="selflink" id="section-5.2" href="#section-5.2">5.2</a>. DHCPv6</span>
The IPv6 relay agent MUST include the "Relay Source Port Option" when
it uses a non-DHCP UDP port (not 547) to communicate to a DHCPv6
server or an upstream IPv6 relay agent. Also, when an IPv6 relay
agent detects that a downstream relay agent uses a non-DHCP UDP port
in the packet, it MUST record the port number in the "Downstream
Source Port" field of this option. If this option is included to
indicate only the local non-DHCP UDP port usage and the port is not
being used by a downstream relay agent, the Downstream Source Port
field MUST be set to zero.
The IPv6 relay agent MUST include this option in the following three
cases:
1. The local relay agent uses a non-DHCP UDP port (not 547).
2. The downstream relay agent uses a non-DHCP UDP port (not 547).
3. The local relay agent and the downstream relay agent both use
non-DHCP UDP ports (not 547).
In the first case, the value of the "Downstream Source Port" field is
set to zero. In the other two cases, the value of the field is set
to the UDP port number that the downstream relay agent uses.
When an IPv6 server receives a Relay-forward message with the "Relay
Source Port Option", it MUST copy the option when constructing the
Relay-reply chain in response to the Relay-forward message. This
option MUST NOT appear in any message other than a Relay-forward or
Relay-reply message. Additionally, the IPv6 server MUST check and
use the UDP source port from the UDP packet of the Relay-forward
message in replying to the relay agent.
<span class="grey">Shen & Chen Standards Track [Page 6]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-7" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
When a relay agent receives a Relay-reply message with the "Relay
Source Port Option" from a server or from an upstream relay agent, if
the "Downstream Source Port" field in the option is non-zero, it MUST
use this UDP port number to forward the Relay-reply message to the
downstream relay agent.
<span class="h3"><a class="selflink" id="section-5.3" href="#section-5.3">5.3</a>. Compatibility</span>
Sites that need relay agents to specify a source port need to install
new DHCP server and DHCP relay agent software with this feature. If
a site installs only DHCP relay agent software with this feature,
there is no possibility that the DHCP server will be able to
communicate to the relay agent.
<span class="h3"><a class="selflink" id="section-5.4" href="#section-5.4">5.4</a>. Deployment Considerations</span>
During deployment, the operator and/or user of the new DHCP play port
implementation should upgrade the DHCP server before the relay
implementations are deployed. This would ensure that the erroneous
case noted in <a href="#section-5.3">Section 5.3</a> is not encountered. If the upstream relay
agent or server does not support this extension, this DHCP relay port
feature needs to be disabled.
When the DHCP relay port implementation is deployed, the default
relay agent behavior should use the DHCP UDP port, and it is
recommended that the configuration be set up to allow for the mode of
operation where a non-DHCP port can be used for the DHCP relay
agents.
If the network uses a firewall to block or allow DHCP packets with
both static UDP source and destination port numbers, this may no
longer match the packets from new DHCP relay agent and server
software with this extension. The firewall rules need to be modified
to match only the DHCP server side of the UDP port number and, if
necessary, IP addresses and other attributes.
<span class="h2"><a class="selflink" id="section-6" href="#section-6">6</a>. Example of an IPv6-Cascaded Relay</span>
An example of IPv6-cascaded relay agents with the "Relay Source Port
Option" is shown below.
(forward) (forward) (forward)
Relay1 ----------> Relay2 ----------> Relay3 ----------> Server
(1000) (547) (547)
(reply) (reply) (reply)
<---------- <---------- <----------
<span class="grey">Shen & Chen Standards Track [Page 7]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-8" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
In the above diagram, all the IPv6 devices support this generalized
UDP source port extension except for Relay3. Relay1 is the only
relay agent device that uses a non-DHCP UDP port (not 547). Relay2
is the upstream device of Relay1.
Both Relay1 and Relay2 include the "Relay Source Port Option" in the
Relay-forward message. Relay1 sets the "Downstream Source Port"
field in the option to zero. Relay2 notices that the "Relay Source
Port Option" is included in the message from Relay1, and it
determines that the UDP source port used by Relay1 is 1000. Relay2
will include the "Relay Source Port Option", and it sets the
"Downstream Source Port" field in the option to 1000. The IPv6
server copies the "Relay Source Port Option" when replying with the
Relay-reply message.
When Relay2 receives the Relay-reply message with the "Relay Source
Port Option", it finds that the "Downstream Source Port" field has
the value of 1000. Relay2 then uses this port number in the UDP
packet when sending the Relay-reply message to Relay1.
When Relay1 receives the Relay-reply message with the "Relay Source
Port Option", it finds that the "Downstream Source Port" field has
the value of zero. Relay1 then uses the normal IPv6 port 547 in the
packet sending the Relay-reply message to its downstream relay agent
or uses UDP port 546 to an IPv6 client.
This DHCP extension works with any combination of IPv6-cascaded relay
agents, as long as the relay agent that uses a non-DHCP UDP port (not
547) and its upstream relay device support this generalized UDP
source port extension.
Similar to the above example, but now assume that Relay2 uses the UDP
source port of 2000 instead of 547 as in the diagram. The Relay3
device needs to support this DHCP extension and it will set 2000 in
its "Downstream Source Port" field of the option in the Relay-forward
message. When the DHCP server sends the DHCP Relay-reply to Relay3,
Relay3 finds that its own relay option has this "Downstream Source
Port" with the value of 2000. Relay3 will use this UDP port when
sending the Relay-reply message to Relay2. Relay2 finds its own
relay option also has this "Downstream Source Port" with the value of
1000. Relay2 will use this UDP port when sending the Relay-reply
message to Relay1.
<span class="grey">Shen & Chen Standards Track [Page 8]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-9" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
<span class="h2"><a class="selflink" id="section-7" href="#section-7">7</a>. IANA Considerations</span>
IANA has registered "DHCPv4 Relay Source Port Sub-option" (19) for
the IPv4 "Relay Agent Information" option within the "DHCP Relay
Agent Sub-Option Codes" registry <<a href="https://www.iana.org/assignments/bootp-dhcp-parameters">https://www.iana.org/assignments/</a>
<a href="https://www.iana.org/assignments/bootp-dhcp-parameters">bootp-dhcp-parameters</a>> [<a href="./rfc3046" title=""DHCP Relay Agent Information Option"">RFC3046</a>].
IANA has registered "OPTION_RELAY_PORT" (135) for the DHCPv6 "Relay
Source Port Option" within the DHCPv6 "Option Codes" registry
<<a href="http://www.iana.org/assignments/dhcpv6-parameters">http://www.iana.org/assignments/dhcpv6-parameters</a>"> [<a href="./rfc3315" title=""Dynamic Host Configuration Protocol for IPv6 (DHCPv6)"">RFC3315</a>].
<span class="h2"><a class="selflink" id="section-8" href="#section-8">8</a>. Security Considerations</span>
[<a id="ref-RFC3118">RFC3118</a>] and [<a href="./rfc3315" title=""Dynamic Host Configuration Protocol for IPv6 (DHCPv6)"">RFC3315</a>] described many of the threats in using DHCP.
This extension does not raise additional security issues.
<span class="h2"><a class="selflink" id="section-9" href="#section-9">9</a>. Normative References</span>
[<a id="ref-RFC2119">RFC2119</a>] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc2119">RFC 2119</a>,
DOI 10.17487/RFC2119, March 1997,
<<a href="https://www.rfc-editor.org/info/rfc2119">https://www.rfc-editor.org/info/rfc2119</a>>.
[<a id="ref-RFC2131">RFC2131</a>] Droms, R., "Dynamic Host Configuration Protocol",
<a href="./rfc2131">RFC 2131</a>, DOI 10.17487/RFC2131, March 1997,
<<a href="https://www.rfc-editor.org/info/rfc2131">https://www.rfc-editor.org/info/rfc2131</a>>.
[<a id="ref-RFC3046">RFC3046</a>] Patrick, M., "DHCP Relay Agent Information Option",
<a href="./rfc3046">RFC 3046</a>, DOI 10.17487/RFC3046, January 2001,
<<a href="https://www.rfc-editor.org/info/rfc3046">https://www.rfc-editor.org/info/rfc3046</a>>.
[<a id="ref-RFC3118">RFC3118</a>] Droms, R., Ed. and W. Arbaugh, Ed., "Authentication for
DHCP Messages", <a href="./rfc3118">RFC 3118</a>, DOI 10.17487/RFC3118, June 2001,
<<a href="https://www.rfc-editor.org/info/rfc3118">https://www.rfc-editor.org/info/rfc3118</a>>.
[<a id="ref-RFC3315">RFC3315</a>] Droms, R., Ed., Bound, J., Volz, B., Lemon, T., Perkins,
C., and M. Carney, "Dynamic Host Configuration Protocol
for IPv6 (DHCPv6)", <a href="./rfc3315">RFC 3315</a>, DOI 10.17487/RFC3315, July
2003, <<a href="https://www.rfc-editor.org/info/rfc3315">https://www.rfc-editor.org/info/rfc3315</a>>.
[<a id="ref-RFC8174">RFC8174</a>] Leiba, B., "Ambiguity of Uppercase vs Lowercase in <a href="./rfc2119">RFC</a>
<a href="./rfc2119">2119</a> Key Words", <a href="https://www.rfc-editor.org/bcp/bcp14">BCP 14</a>, <a href="./rfc8174">RFC 8174</a>, DOI 10.17487/RFC8174,
May 2017, <<a href="https://www.rfc-editor.org/info/rfc8174">https://www.rfc-editor.org/info/rfc8174</a>>.
<span class="grey">Shen & Chen Standards Track [Page 9]</span></pre>
<hr class='noprint'/><!--NewPage--><pre class='newpage'><span id="page-10" ></span>
<span class="grey"><a href="./rfc8357">RFC 8357</a> DHCP Relay Source Port March 2018</span>
Acknowledgments
The authors would like to thank Peter Arberg, Luyuan Fang, Bhanu
Gopalasetty, Scott Kelly, Andre Kostur, Victor Kuarsingh, Ted Lemon,
Adam Roach, Kishore Seshadri, and Jackelyn Shen for their review and
comments of this document.
The authors would like to thank Bernie Volz for discussions that led
to the definition of the "Relay Source Port Sub-option" and DHCPv6
"Relay Source Port Option".
Authors' Addresses
Naiming Shen
Cisco Systems
560 McCarthy Blvd.
Milpitas, CA 95035
United States of America
Email: naiming@cisco.com
Enke Chen
Cisco Systems
560 McCarthy Blvd.
Milpitas, CA 95035
United States of America
Email: enkechen@cisco.com
Shen & Chen Standards Track [Page 10]
</pre>
|