Subject: RE: Issue 8

From: "Mohan Parthasarathy" <[email-masked]>
Date: Fri, 1 Aug 2003 16:40:17 -0700

> Mohan,
> 
> >> Taking it one step further, we can also say it is the
> >> responsibility of the PAA to initiate PANA authentication
> >> before the session expires. Nevertheless, sending the
> >> lifetime to PaC is still useful as it helps PaC manage EAP SA
> >> and PANA SA efficiently.
> >> 
> > How does it help it to maintain efficiently ?
> 
> If PaC leaves the network without exchanging PANA-termination 
> messages, then
> the associated state would linger around indefinitely, unless 
> it has a timer
> associated. So, knowing the session lifetime helps PaC set this timer.
> 
Ok, the "manage" above really meant "help clean up SAs". I am not disagreeing
with the conclusion as there is really no harm in sending this information
to the client. PAA can always terminate early i.e it is sort of advisory i guess.
In this specific example, the PaC does not want to rely on the link layer
information to clean up SAs as it may not be secure. So, the timer is helpful
i guess. 

-mohan

> Alper