Subject: Re: [Dime] Session-ID in draft-sdecugis-dime-diameter-erp-01

From: Behcet Sarikaya <[email-masked]>
Date: Wed, 1 Jul 2009 09:44:05 -0700 (PDT)

----- Original Message ----
> From: Qin Wu <[email-masked]>
> To: Behcet Sarikaya <[email-masked]>
> Cc: [email-masked]
> Sent: Tuesday, June 30, 2009 9:07:31 PM
> Subject: Re: [Dime] Session-ID in draft-sdecugis-dime-diameter-erp-01
> 
> Hi, Behcet:
> Full EAP authentication can be method specific and create EAP method specific 
> session-Id, however, as described in RFC5296, ERP is a method independent 
> protocol. 

>From EAP point of view, EAP exports several things like EMSK which is used by ERP. Session-ID is also exported and can be used by ERP.

That's my point.

Unless the ERP reuse the method specific Session-Id generated from 
> Full EAP authentication, it seems difficult for ERP to create EAP method 
> specific Session-Id. 

It is exported like EMSK, why should ERP regenerate the Session-ID?
It is only used in EMSKName calculation.

> On the other hand, if ERP can create Session-Id that is independent of EAP, 
> that's another case.

AAA specific session-IDs also exist but different for each protocol like RADIUS or Diameter. To be used for accounting like Sebastien mentioned. 
IMHO EAP Session-ID is not the AAA session ID.

Regards,

Behcet