Re: [Anima-bootstrap] Can the proxy add information during bootstrap?

["Michael Behringer (mbehring)" <[e-mail]>]

> Toerless Eckert <[e-mail]> wrote:
>     > On Wed, Apr 13, 2016 at 12:46:54PM +1200, Brian E Carpenter wrote:
>     >> If there's a need to discover topology, which I understood Michael B
>     >> was after, couldn't that be done after enrolment, with no security
>     >> risk?
> 
>     > I am sure operators would love to have the option to reject enrollment
>     > if the device is in a wrong location.
> 
> <putting my operator hat on, [AS26227, AS26413]>
> 
> That's silly.  Either it's your device, or it's not.
> Even if it is in the wrong location, enrolling the device makes sense.
> Unless it's completely the wrong *model* and hasn't got any interfaces of
> the right type, getting the new service online usually takes priority.
> Installing a $300 8-port firewall instead of the $200 2-port firewall isn't a
> disaster. If the model was close enough, you'd want to consider the cost of
> shipping vs the cost difference of the devices.
> 
> You might ship the *correct* model out once you figure this out and have
> remote hands swap cables later on, but that's essentially a capital allocation
> question.
> 
> If you know enough in advance to know which device (down to the SN) was
> supposed to be in each location, then I don't think you need/have a zero-
> touch situation.

I've heard the requirement quite a few times to be able to see where in the network a device is trying to enrol. For starters, assuming you are shipping devices to install locations randomly, then you can make the link between device and target config. 

If pushed hard, you could argue against this I guess; you could argue that you can first let the device enrol, THEN check where it is. 

Just saying: I've heard this request quite a few times; we can choose to ignore it, and argue our model. But seems the operational procedures are set up that way today, and we'd fit in more easily with what's done today. 

My feeling: Unless a big issue, would be good to support the passing on of proxy information in the bootstrap protocol. 

Michael