1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
|
Network Working Group J. Bound
Request for Comments: 1888 Digital Equipment Corporation
Category: Experimental B. Carpenter
CERN
D. Harrington
Digital Equipment Corporation
J. Houldsworth
ICL Network Systems
A. Lloyd
Datacraft Technologies
August 1996
OSI NSAPs and IPv6
Status of this Memo
This memo defines an Experimental Protocol for the Internet
community. This memo does not specify an Internet standard of any
kind. Discussion and suggestions for improvement are requested.
Distribution of this memo is unlimited.
Abstract
This document recommends that network implementors who have planned
or deployed an OSI NSAP addressing plan, and who wish to deploy or
transition to IPv6, should redesign a native IPv6 addressing plan to
meet their needs. However, it also defines a set of mechanisms for
the support of OSI NSAP addressing in an IPv6 network. These
mechanisms are the ones that MUST be used if such support is
required. This document also defines a mapping of IPv6 addresses
within the OSI address format, should this be required.
Table of Contents
1. General recommendation on NSAP addressing plans..............2
2. Summary of defined mechanisms................................4
3. Restricted NSAPA in a 16-byte IPv6 address for ICD and DCC...4
3.1 Routing restricted NSAPAs...................................5
4. Truncated NSAPA used as an IPv6 address......................6
4.1 Routing truncated NSAPAs....................................8
5. Carriage of full NSAPAs in IPv6 destination option...........9
6. IPv6 addresses inside an NSAPA..............................10
7. Security Considerations.....................................11
Acknowledgements...............................................11
References.....................................................12
Annex A: Summary of NSAP Allocations...........................13
Annex B: Additional Rationale..................................14
Authors' Addresses.............................................16
Bound, et. al. Experimental [Page 1]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
1. General recommendation on NSAP addressing plans
This recommendation is addressed to network implementors who have
already planned or deployed an OSI NSAP addressing plan for the usage
of OSI CLNP [IS8473] according to the OSI network layer addressing
plan [IS8348] using ES-IS and IS-IS routing [IS9542, IS10589]. It
recommends how they should adapt their addressing plan for use with
IPv6 [RFC1883].
The majority of known CLNP addressing plans use either the Digital
Country Code (DCC) or the International Code Designator (ICD) formats
defined in [IS8348]. A particular example of this is the US
Government OSI Profile Version 2 (GOSIP) addressing plan [RFC1629].
The basic NSAP addressing scheme and current implementations are
summarised in Annex A.
[IS8348] specifies a maximum NSAPA (NSAP address) size of 20 bytes
and some network implementors have designed address allocation
schemes which make use of this 20 byte address space.
Other NSAP addressing plans have been specified by the ITU-T for
public data services, such as X.25 and ISDN, and these can also have
addresses up to 20 bytes in length.
The general recommendation is that implementors SHOULD design native
IPv6 addressing plans according to [RFC1884], but doing so as a
natural re-mapping of their CLNP addressing plans. While it is
impossible to give a general recipe for this, CLNP addresses in DCC
or ICD format can normally be split into two parts: the high order
part relating to the network service provider and the low order part
relating to the user network topology and host computers.
For example, in some applications of US GOSIP the high order part is
the AFI, ICD, DFI, AA and RD fields, together occupying 9 bytes. The
low order part is the Area and ID fields, together occupying 8 bytes.
(The selector byte and the two reserved bytes are not part of the
addressing plan.) Thus, in such a case, the high-order part could be
replaced by the provider part of an IPv6 provider-based addressing
plan. An 8-byte prefix is recommended for this case and [RFC1884]
MUST be followed in planning such a replacement. The low order part
would then be mapped directly in the low-order half of the IPv6
address space, and user site address plans are unchanged. A 6-byte
ID field, exactly as used in US GOSIP and other CLNP addressing
plans, will be acceptable as the token for IPv6 autoconfiguration
[RFC1971].
Analogous rules would be applied for other CLNP addressing plans
similar to US GOSIP, which is used only as a well known example.
Bound, et. al. Experimental [Page 2]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
Three warnings must be carefully considered in every case:
1. The ES-IS/IS-IS model employs a routing hierarchy down to the Area
level, but not all end systems in an Area need to be in the same
physical subnet (on the same "wire" or "link"). IS routers on
different links within a given Area exchange information about the
end systems they can each reach directly. In contrast, the IPv6
routing model extends down to the subnet level and all hosts in the
same subnet are assumed to be on the same link. In mapping a CLNP
addressing plan into IPv6 format, without changing the physical
topology, it may be necessary to add an extra level of hierarchy to
cope with this mismatch. In other words, the Area number cannot
blindly be mapped as a subnet number, unless the physical network
topology corresponds to this mapping.
2. It is highly desirable that subnet addresses can be aggregated for
wide area routing purposes, to minimise the size of routing tables.
Thus network implementors should ensure that the address prefix used
for all their subnets is the same, regardless of whether a particular
subnet is using a pure IPv6 addressing scheme or one derived from a
CLNP scheme as above.
3. Some hosts have more than one physical network interface. In the
ES-IS model, an end system may have more than one NSAP address, each
of which identifies the host as a whole. Such an end system with
more than one physical interface may be referenced by any one of the
NSAPs, and reached via any one of the physical connections. In the
IPv6 model, a host may have multiple IPv6 addresses per interface,
but each of its physical interfaces must have its own unique
addresses. This restriction must be applied when mapping an NSAP
addressing plan into an IPv6 addressing plan for such hosts.
This document does not address the issues associated with migrating
the routing protocols used with CLNP (ES-IS or IS-IS) and transition
of their network infrastructure.
Bound, et. al. Experimental [Page 3]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
2. Summary of defined mechanisms
This document defines four distinct mechanisms. All of these are
ELECTIVE mechanisms, i.e. they are not mandatory parts of an IPv6
implementation, but if such mechanisms are needed they MUST be
implemented as defined in this document.
1. Restricted NSAPA mapping into 16-byte IPv6 address
2. Truncated NSAPA for routing, full NSAPA in IPv6 option
3. Normal IPv6 address, full NSAPA in IPv6 option
4. IPv6 address carried as OSI address
To clarify the relationship between the first three mechanisms, note
that:
If the first byte of an IPv6 address is hexadecimal 0x02 (binary
00000010), then the remaining 15 bytes SHALL contain a restricted
NSAPA mapped as in Chapter 3 below. The term "restricted" is used
to indicate that this format is currently restricted to a subset
of the ICD and DCC formats.
If the first byte of an IPv6 address is hexadecimal 0x03 (binary
00000011), then the remaining 15 bytes SHALL contain a truncated
NSAPA as described in Chapter 4 below. EITHER a destination option
containing the complete NSAPA of any format, as described in
Chapter 5 below, OR an encapsulated CLNP packet, SHALL be present.
With any other format of IPv6 address, a destination option
containing a complete NSAPA, as defined in Chapter 5 below, MAY be
present.
3. Restricted NSAPA in a 16-byte IPv6 address for ICD and DCC
Some organizations may decide for various reasons not to follow the
above general recommendation to redesign their addressing plan. They
may wish to use their existing OSI NSAP addressing plan unchanged for
IPv6. It should be noted that such a decision has serious
implications for routing, since it means that routing between such
organizations and the rest of the Internet is unlikely to be
optimised. An organization using both native IPv6 addresses and NSAP
addresses for IPv6 would be likely to have inefficient internal
routing. Nevertheless, to cover this eventuality, the present
document defines a way to map a subset of the NSAP address space into
the IPv6 address space. The mapping is algorithmic and reversible
within this subset of the NSAP address space.
Bound, et. al. Experimental [Page 4]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
0-3 |0 0 0 0 0 0 1 0| AFcode| IDI (last 3 digits) |Prefix(octet 0)|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
4-7 | Prefix (octets 1 through 4) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
8-11 | Area (octets 0 and 1) | ID (octets 0 and 1) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
12-15| ID (octets 2 through 5) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The AFcode nibble is overloaded, and encoded as follows
0000-1001 Implied AFI value is 47 (ICD)
(0-9 decimal) AFcode is first BCD digit of the ICD
IDI is last three BCD digits of the ICD
1010 Implied AFI value is 39 (DCC)
(hex. A) IDI is the three BCD digits of the DCC
1011-1111 Reserved, not to be used.
(hex. B-F)
The NSEL octet is not included. It is of no use for TCP and UDP
traffic. In any case where it is needed, the mechanism described in
the next chapter should be used.
The longest CLNP routing prefixes known to be in active use today are
5 octets (subdivided into AA and RD fields in US GOSIP version 2).
Thus the semantics of existing 20-octet NSAPAs can be fully mapped.
DECnet/OSI (Registered Trade Mark) address semantics are also fully
mapped.
It is expected that hosts using restricted NSAPAs could be configured
using IPv6 auto-configuration [RFC1971], and that they could use
normal IPv6 neighbour discovery mechanisms [RFC1970].
Restricted NSAPAs, assuming that they can be fully routed using IPv6
routing protocols, may be used in IPv6 routing headers.
3.1 Routing restricted NSAPAs
As mentioned in Chapter 1, there is a mismatch between the OSI or
GOSIP routing model and the IPv6 routing model. Restricted NSAPAs can
be routed hierarchically down to the Area level but must be flat-
routed within an Area. Normal IPv6 addresses can be routed
Bound, et. al. Experimental [Page 5]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
hierarchically down to physical subnet (link) level and only have to
be flat-routed on the physical subnet.
Thus, packets whose destination address is a restricted NSAPA can be
routed using any normal IPv6 routing protocol only as far as the
Area. If the Area contains more than one physical subnet reached by
more than one router, no IPv6 routing protocol can route the packet
to the correct final router. There is no solution to this problem
within the existing IPv6 mechanisms. Presumably a flooding
algorithm, or a suitably adapted implementation of ES-IS, could solve
this problem.
In the absence of such a routing protocol, either the Area number
must be hierarchically structured to correspond to physical subnets,
or each Area must be limited to one physical subnet.
It is necessary in an IPv6 network that routes may be aggregated to
minimise the size of routing tables. If a subscriber is using both
normal IPv6 addresses [RFC1884] and restricted NSAPAs, these two
types of address will certainly not aggregate with each other, since
they differ from the second most significant bit onwards. This means
that there may be a significant operational penalty for using both
types of address with currently known routing technology.
4. Truncated NSAPA used as an IPv6 address
An NSAP address contains routing information (e.g. Routing Domain and
area/subnet identifiers) in the form of the Area Address (as defined
in [IS10589]). The format and length of this routing information are
typically compatible with a 16 byte IPv6 address, and may be
represented as such using the following format:
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
0-3 |0 0 0 0 0 0 1 1| High order octets of full NSAP address |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
4-7 | NSAP address continued |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
8-11 | NSAP address continued |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
12-15| NSAP address truncated ... zero pads if necessary |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
If appropriate, when used as a destination IPv6 address, the
truncated NSAPA may be interpreted as an IPv6 anycast address. An
anycast address may be used to identify either an IPv6 node, or
potentially even an OSI End System or Intermediate System. For
Bound, et. al. Experimental [Page 6]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
example, it might be configured to identify the endpoints of a CLNP
tunnel, or it might identify a particular OSI capable system in a
particular subnet.
If a truncated NSAPA is used as a source address, it must be
interpreted as a unicast address and must therefore be uniquely
assigned within the IPv6 address space.
If a truncated NSAPA is used as either the source or destination IPv6
address (or both), EITHER an NSAPA destination option OR an
encapsulated CLNP packet MUST be present. It is the responsibility of
the destination system to take the appropriate action for each IPv6
packet received (e.g. forward, decapsulate, discard) and, if
necessary, return to the originating host an appropriate ICMP error
message.
If the truncated NSAPA is used to identify a router, and an NSAPA
destination option is present, then it is the responsibility of that
router to forward the complete IPv6 packet to the appropriate host
based upon the Destination NSAP field in the NSAPA option. This
forwarding process may be based upon static routing information (i.e.
a manual mapping of NSAPs to IPv6 unicast addresses), or it may be
gathered in an automated fashion analogous to the ES-IS mechanism,
perhaps using extensions to the Neighbor Discovery protocol
[RFC1970]. The details of such a mechanism are beyond the scope of
this document.
This document does not restrict the formats of NSAP address that may
be used in truncated NSAPAs, but it is apparent that binary ICD or
DCC formats will be much easier to accomodate in an IPv6 routing
infrastructure than the other formats defined in [IS8348].
It is not expected that IPv6 autoconfiguration [RFC1971] and
discovery [RFC1970] will work unchanged for truncated NSAPAs.
Truncated NSAPAs are not meaningful within IPv6 routing headers, and
there is no way to include full NSAPAs in routing headers.
If a packet whose source address is a truncated NSAPA causes an ICMP
message to be returned for whatever reason, this ICMP message may be
discarded rather than being returned to the true source of the
packet.
Bound, et. al. Experimental [Page 7]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
4.1 Routing truncated NSAPAs
This is a grey area. If the truncated NSAPA retains a hierarchical
structure, it can be routed like a restricted NSAPA, subject to the
same problem concerning the mismatch between Areas and subnets. If
possible, in the case of a GOSIP-like NSAPA, it should be truncated
immediately after the Area number. In this case the routing
considerations will be similar to those for restricted NSAPAs, except
that final delivery of the packet will depend on the last IPv6 router
being able to interpret the NSAPA destination option (or an
encapsulated CLNP packet).
In the general case, nothing can be said since the NSAPA could have
almost any format and might have very little hierarchical content
after truncation. There may be many cases in which truncated NSAPAs
cannot be routed across large regions of the IPv6 network.
The situation for route aggregation is similar to that described in
Section 3.1 as long as the truncated NSAPAs have ICD or DCC format.
However, if arbitrary NSAPAs are used nothing can be predicted about
route aggregation and we must assume that it will be poor.
Bound, et. al. Experimental [Page 8]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
5. Carriage of full NSAPAs in IPv6 destination option
In the case of a truncated NSAPA used as an IPv6 address other than
for a CLNP tunnel, the full NSAPA must be carried in a destination
option. Any format defined in [IS8348] is allowed.
The NSAPA destination option is illustrated below. It has no
alignment requirement.
The option type code is 11-0-00011 = 195 decimal.
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|1 1 0 0 0 0 1 1| Opt Data Len |Source NSAP Len| Dest. NSAP Len|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+ +
| |
+ Source NSAP +
| |
+ +
| |
+ +
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| |
+ +
| |
+ Destination NSAP +
| |
+ +
| |
+ +
| |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
The length fields are each one octet long and are expressed in
octets. The destination node should check the consistency of the
length fields (Option Data Length = Source NSAP Length + Dest. NSAP
Length +2). In case of inconsistency the destination node shall
discard the packet and send an ICMP Parameter Problem, Code 2,
message to the packet's source address, pointing to the Option Data
Length field.
The boundary between the source NSAP and the destination NSAP is
simply aligned on an octet boundary. With standard 20 octet NSAPs the
total option length is 44 bytes and the Option Data Length is 42.
Bound, et. al. Experimental [Page 9]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
The NSAP encodings follow [IS8348] exactly.
If this option is used, both end systems concerned SHOULD use NSAP
addresses. In the exceptional case that only one of the end systems
uses NSAP addresses, the NSAP Length field of the other SHALL be set
to zero in the NSAP destination option.
This destination option is used in two cases. Firstly, an IPv6 source
node using normal IPv6 addresses (unicast address or anycast address)
MAY supply an NSAP destination option header for interpretation by
the IPv6 destination node. Secondly, an IPv6 node MAY use a truncated
NSAP address in place of a normal IPv6 address.
IPv6 nodes are not required to implement this option, except for
nodes using truncated NSAPAs other than for CLNP tunnels.
6. IPv6 addresses inside an NSAPA
If it is required, for whatever reason, to embed an IPv6 address
inside a 20-octet NSAP address, then the following format MUST be
used.
A specific possible use of this embedding is to express an IP address
within the ATM Forum address format. Another possible use would be
to allow CLNP packets that encapsulate IPv6 packets to be routed in a
CLNP network using the IPv6 address architecture. Several leading
bytes of the IPv6 address could be used as a CLNP routing prefix.
The first three octets are an IDP in binary format, using the AFI
code in the process of being allocated to the IANA. The AFI value
provisionally allocated is 35, but this requires a formal
modification to [IS8348]. The encoding format is as for AFI value 47
[IS8348]. The third octet of the IDP is known as the ICP (Internet
Code Point) and its value must be zero. All other values are reserved
for allocation by the IANA.
Thus an AFI value of 35 with an ICP value of zero means that "this
NSAPA embeds a 16 byte IPv6 address".
The last octet is a selector. To maintain compatibility with both
NSAP format and IPv6 addressing, this octet must be present, but it
has no significance for IPv6. Its default value is zero.
Bound, et. al. Experimental [Page 10]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
0-3 | AFI = 35 | ICP = 0000 | IPv6 (byte 0)|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
4-7 | IPv6 (bytes 1-4) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
8-11 | IPv6 (bytes 5-8) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
12-15| IPv6 (bytes 9-12) |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
16-19| IPv6 (bytes 13-15) |0 0 0 0 0 0 0 0|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Theoretically this format would allow recursive address embedding.
However, this is considered dangerous since it might lead to routing
table anomalies or to loops (compare [RFC1326]). Thus embedded IPv6
address MUST NOT have the prefixes 0x02 or 0x03, and an NSAPA with
the IANA AFI code MUST NOT be embedded in an IPv6 header.
An NSAPA with the IANA AFI code and ICP set to zero is converted to
an IPv6 address by stripping off the first three and the twentieth
octets. All other formats of NSAPA are handled according to the
previous Chapters of this document.
7. Security Considerations
Security issues are not specifically addressed in this document, but
it is compatible with the IPv6 security mechanisms [RFC1825].
Acknowledgements
The authors are pleased to acknowledge the suggestions and comments
of Ross Callon, Richard Collella, Steve Deering, Dirk Fieldhouse,
Joel Halpern, Denise Heagerty, Cyndi Jung, Yakov Rekhter, and members
of the former TUBA and current IPNG working groups of the IETF. The
support of Scott Bradner and Allison Mankin of the IESG was
essential.
Herb Bertine, Alan Chambers, Dave Marlow, and Jack Wheeler were all
active in arranging the AFI allocation by ISO/IEC JTC1/SC6.
Bound, et. al. Experimental [Page 11]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
References
[IS8473] Data communications protocol for providing the
connectionless-mode network service, ISO/IEC 8473, 1988.
[IS8348] Annex A, Network Layer Addressing, and Annex B, Rationale
for the material in Annex A, of ISO/IEC 8348, 1993 (identical to
CCITT Recommendation X.213, 1992).
[IS10589] Intermediate system to intermediate system intra-domain-
routeing routine information exchange protocol for use in
conjunction with the protocol for providing the connectionless-mode
Network Service (ISO 8473), ISO 10589, 1992.
[IS9542] End system to Intermediate system routeing exchange
protocol for use in conjunction with the Protocol for providing the
connectionless-mode network service (ISO 8473), ISO 9542, 1988.
[RFC1629] Colella, R., Callon, R., Gardner, E., and Y. Rekhter,
"Guidelines for OSI NSAP Allocation in the Internet", RFC 1629, May
1994.
[RFC1326] Tsuchiya, P., "Mutual Encapsulation Considered
Dangerous", RFC 1326, May 1992.
[RFC1883] Deering, S., and R. Hinden, "Internet Protocol, Version 6
(IPv6) Specification", RFC 1883, December 1995.
[RFC1884] Hinden, R., and S. Deering, "IP Version 6 Addressing
Architecture", RFC 1884, December 1995.
[RFC1971] Thompson, S., and T. Narten, "IPv6 Stateless Address
Autoconfiguration", RFC1971, August 1996.
[RFC1970] Narten, T., Nordmark, E., and W. Simpson, "Neighbor
Discovery for IP Version 6 (IPv6)", RFC1970, August 1996.
[RFC1825] Atkinson, R., "Security Architecture for the Internet
Protocol", RFC 1825, August 1995.
Bound, et. al. Experimental [Page 12]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
Annex A: Summary of NSAP Allocations
-----IDP------
-----------------------------------------------------
| AFI | IDI | DOMAIN SPECIFIC PART |
-----------------------------------------------------
--------------------20 bytes max---------------------
The Initial Domain Part (IDP) is split into Authority and Format
Identifier (AFI) followed by the Initial Domain Identifier (IDI).
This combination is followed by the Domain Specific Part and
allocation within that part is domain specific.
The following is a summary of current allocations:
ISO DCC Scheme
AFI = decimal 38 or binary 39 = ISO Data Country Code Scheme. IDI =
3 decimal or binary digits specifying the country. ISO allocate the
country codes. The DSP is administered by the standards authority
for each country. In the UK, the British Standards Institution have
delegated administration to the Federation of Electronics Industries
- FEI
The UK DSP is split into a single digit UK Format Indicator (UKFI)
which indicates large, medium or small organisation rather like IP
addressing and a UK Domain Identifier (UKDI). Using binary coded
decimal examples only (there are binary equivalents):
UKFI = 0 is reserved UKFI = 1, UKDI = nnn, UK Domain Specific Part =
31 digits. UKFI = 2, UKDI = nnnnn, UKDSP = 29 digits max. UKFI = 3,
UKDI = nnnnnnnn, UKDSP = 26 digits max.
UKFI = 4 to 9 reserved
The UK Government have been allocated a UKDI in the UKFI = 1 (large
organisation) format and have specified the breakdown of the
Government Domain Specific Part with sub domain addresses followed by
a station ID (which could be a MAC address) and a selector (which
could be a TSAP selection).
ITU-T X.121
AFI = decimal 36 or 52, binary 37 or 53 indicates that the IDI is a
14 digit max X.121 International Numbering Plan address (prefix, 3
digit Data Country Code, dial up data network number). The full
X.121 address indicates who controls the formatting of the DSP.
Bound, et. al. Experimental [Page 13]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
ITU-T F.69
AFI = 40,54 or binary 41,55 indicates that the IDI is a telex number
up to 8 digits long.
ITU-T E.163
AFI = 42,56 or binary 43,57 indicates that the IDI is a normal
telephone number up to 12 digits long.
ITU-T E.164
AFI = 44,58 or binary 45,59 indicates that the IDI is an ISDN number
up to 15 digits long.
ISO 6523-ICD
AFI = 46 or binary 47 indicates that the IDI is an International Code
Designator allocated according to ISO 6523. You have to be a global
organisation to get one of these. The Organisation to which the ISO
6523 designator is issued specifies the DSP allocation.
Annex B: Additional Rationale
This annex is intended to give additional rationale, motivation and
justification for the support of NSAPAs in an IPv6 network.
There are several models for OSI-IPv6 convergence, of which address
mapping is only one. The other models can be identified as
1. Dual stack coexistence, in which a CLNP network and an IPv6
network exist side by side indefinitely using multiprotocol
routers.
2. CLNP tunnels over IPv6.
3. OSI transport over IPv6.
4. OSI transport over UDP.
5. OSI transport over TCP (compare RFC 1006)
The present model is more fundamental, as it attempts to unify and
reconcile the OSI and IPv6 addressing and routing schemes, and
replace CLNP by IPv6 at the network level. The rationale for this
choice is to preserve investment in NSAPA allocation schemes, and to
open the door for peer-to-peer routing models between IPv6 and bearer
services (such as ATM) using NSAPA addressing. It should be noted
Bound, et. al. Experimental [Page 14]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
that such peer-to-peer models are contentious at the time of writing,
but in any case a consistent address mapping is preferable to
multiple mappings.
In addition to their use to retain an existing addressing plan,
certain other uses of restricted NSAPAs could be envisaged. They
could be used as an intermediate addressing plan for a network making
a transition from CLNP to IPv6. They could be used in a header
translation scheme for dynamic translation between IPv6 and CLNP.
They could be used to allow CLNP and IPv6 traffic to share the same
routing architecture within an organization ("Ships in the Day").
It should be noted that the use of full NSAPA addresses in end
systems impacts many things. The most obvious are the API and DNS. If
applications are to work normally, everything that has to be modified
to cope with IPv6 addresses has to be further modified for full
NSAPAs. The mechanisms defined in the present document are only a
small part of the whole.
A destination option was chosen to carry full NSAPAs, in preference
to a dedicated extension header. In the case of an extension header,
all IPv6 nodes would have needed to understand its syntax merely in
order to ignore it. In contrast, intermediate nodes can ignore the
destination option without any knowledge of its syntax. Thus only
nodes interested in NSAPAs need to know anything about them.
Thus we end up with two classes of IPv6 nodes:
1. Nodes knowing only about 16 byte addresses (including restricted
NSAPAs, which behave largely like any other IPv6 addresses).
2. Nodes also knowing about 20 byte NSAPAs, either as an extension of
the IPv6 address space or as the CLNP address space. In either case,
regions of the network containing such nodes are connected to each
other by unicast or anycast tunnels through the 16 byte address
space. Routing, system configuration, and neighbour discovery in the
NSAPA regions are outside the scope of the normal IPv6 mechanisms.
Bound, et. al. Experimental [Page 15]
^L
RFC 1888 OSI NSAPs and IPv6 August 1996
Authors' Addresses
Jim Bound
Member Technical Staff Phone: (603) 881-0400
Network Operating Systems Fax: (603) 881-0120
Digital Equipment Corporation Email: bound@zk3.dec.com
110 Spitbrook Road, ZKO3-3/U14
Nashua, NH 03062
Brian E. Carpenter
Group Leader, Communications Systems Phone: +41 22 767-4967
Computing and Networks Division Fax: +41 22 767-7155
CERN Telex: 419000 cer ch
European Laboratory for Particle Physics Email: brian@dxcoms.cern.ch
1211 Geneva 23, Switzerland
Dan Harrington Phone: (508) 486-7643
Digital Equipment Corp.
550 King Street (LKG2-2/Q9) Email: dan@netrix.lkg.dec.com
Littleton, MA 01460
Jack Houldsworth Phone- ICL: +44 438 786112
ICL Network Systems Home: +44 438 352997
Cavendish Road Fax: +44 438 786150
Stevenage Email: j.houldsworth@ste0906.wins.icl.co.uk
Herts
UK SG1 4BQ
Alan Lloyd Phone: +61 3 727 9222
Datacraft Technologies Fax: +61 3 727 1557
252 Maroondah Highway Email: alan.lloyd@datacraft.com.au
Mooroolbark 3138
Victoria Australia
X.400- G=alan;S=lloyd;O=dcthq;P=datacraft;A=telememo;C=au
Bound, et. al. Experimental [Page 16]
^L
|