Re: [Call-home] draft now posted; BoF?

Juergen Schoenwaelder <> Tue, 27 September 2005 16:29 UTC

Received: from localhost.localdomain ([] by with esmtp (Exim 4.32) id 1EKIKX-0006JC-6M; Tue, 27 Sep 2005 12:29:21 -0400
Received: from ([] by with esmtp (Exim 4.32) id 1EKIKV-0006If-HI for; Tue, 27 Sep 2005 12:29:19 -0400
Received: from (ietf-mx []) by (8.9.1a/8.9.1a) with ESMTP id MAA24409 for <>; Tue, 27 Sep 2005 12:29:17 -0400 (EDT)
Received: from ([] helo=boskop.local) by with esmtp (Exim 4.43) id 1EKIRm-0002XP-5A for; Tue, 27 Sep 2005 12:36:51 -0400
Received: by boskop.local (Postfix, from userid 501) id 8D072408731; Tue, 27 Sep 2005 11:58:33 +0200 (CEST)
Date: Tue, 27 Sep 2005 11:58:33 +0200
From: Juergen Schoenwaelder <>
To: Eliot Lear <>
Subject: Re: [Call-home] draft now posted; BoF?
Message-ID: <20050927095833.GB488@boskop.local>
References: <> <20050926210654.GA3067@boskop.local> <>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <>
User-Agent: Mutt/1.5.10i
X-Spam-Score: 0.6 (/)
X-Scan-Signature: ffa9dfbbe7cc58b3fa6b8ae3e57b0aa3
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Discussion of issues relating to &quot; call home&quot; functionality and firewall traversal" <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>

On Tue, Sep 27, 2005 at 11:33:52AM +0200, Eliot Lear wrote:
> I'm not quite sure what you're asking for.  Are you suggesting, for
> instance, that the initiator have a host key and the listener make use
> of a user key?

I am asking for a solution which gives me the same authenticated
identities regardless how the connection was established. In SNMP
terms, I assume that an engine hosting a command generator identifies
itself as a user on the engine hosting the command responder and I
like to leverage this user identity which does exist on the device
across multiple management interfaces, whether that is a CLI, NETCONF
or even an HTTP interface.

Looking at the real-world networking devices I have access to, they
all have a notion of a user identity and they all are able to talk
RADIUS to outsource the authentication decision, which is typically
then password based. I like to leverage that and if call home can be
made to work without changing the premise I am operating on, I am


Juergen Schoenwaelder		    International University Bremen
<>	    P.O. Box 750 561, 28725 Bremen, Germany

Call-home mailing list