Re: [L3sm] Next Step of RFC8049

David Ball <daviball@cisco.com> Thu, 29 June 2017 09:26 UTC

Return-Path: <daviball@cisco.com>
X-Original-To: l3sm@ietfa.amsl.com
Delivered-To: l3sm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79E7E12EBF6 for <l3sm@ietfa.amsl.com>; Thu, 29 Jun 2017 02:26:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.502
X-Spam-Level:
X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pyR56wG4QsgB for <l3sm@ietfa.amsl.com>; Thu, 29 Jun 2017 02:26:19 -0700 (PDT)
Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2411412ECBD for <l3sm@ietf.org>; Thu, 29 Jun 2017 02:26:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3755; q=dns/txt; s=iport; t=1498728378; x=1499937978; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=ic7/3CZ1NTyBfSAlnx7JtStK014DisX+BvdbEr3+LXI=; b=eZU6rOy/9fAMlcoh6tC5iVx3qG3AZknejksIBl/03T5igEy573AKV50f 7LB9zx4N4LALPFuoXr/qOt+dubLtU6YKja/U6ujPT+W2Q20k+kx8/tsyG QPws05GSRwnigszGhRFiOkKgFyH+MyMt3IR/dnVnq0RzRjhvX4U7q+kFb 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CMAAA2x1RZ/xbLJq1HFhkBAQEBAQEBAQEBAQcBAQEBAYVKjgVzkHSVe4IRhhwCg0wYAQIBAQEBAQEBayiFGAEBAQEDIxVNBAsRBAEBAQICDxQDAgJGCQgGAQwGAgEBiiuySYImi0kBAQEBAQEBAQEBAQEBAQEBAQEBAQEdgQuCHINMggyCeYE8gnUpgyOCYQEEiUGHBI4xin+IdYIKhUqDS4Z4jFiIUh84gQowIQgbFYVfBxCBZz82iUEBAQE
X-IronPort-AV: E=Sophos;i="5.40,280,1496102400"; d="scan'208";a="653933270"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jun 2017 09:26:13 +0000
Received: from [10.63.23.161] (dhcp-ensft1-uk-vla370-10-63-23-161.cisco.com [10.63.23.161]) by aer-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v5T9QBiV009314; Thu, 29 Jun 2017 09:26:11 GMT
To: "Ogaki, Kenichi" <ke-oogaki@kddi.com>, stephane.litkowski@orange.com, 'Qin Wu' <bill.wu@huawei.com>, l3sm@ietf.org
References: <etPan.5911cab4.327b23c6.d3a@Qin-Wude-iPhone> <0a70dc6a-961d-66f2-d3a4-c7b9a48706ff@cisco.com> <00d301d2e00b$f0200ca0$d06025e0$@kddi.com> <48fc67df-aefe-a855-9c2a-0b8ca453149e@cisco.com> <006d01d2e4ed$f5f14ea0$e1d3ebe0$@kddi.com> <6f6fade7-1e5e-3cf0-e961-4d3f535eb3de@cisco.com> <6561_1498038981_594A42C5_6561_270_2_9E32478DFA9976438E7A22F69B08FF921E9C913F@OPEXCLILMA4.corporate.adroot.infra.ftgroup> <7caf4c4d-b132-2e07-54c8-8e9c62727293@cisco.com> <00b101d2ee2b$8ef28ab0$acd7a010$@kddi.com> <0ed5e7de-9ab3-19a9-06ba-f0ec8a83c658@cisco.com> <002a01d2f003$b45408e0$1cfc1aa0$@kddi.com>
From: David Ball <daviball@cisco.com>
Message-ID: <e7862c2b-d506-75dc-8cf4-127b62aa9348@cisco.com>
Date: Thu, 29 Jun 2017 10:26:11 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0
MIME-Version: 1.0
In-Reply-To: <002a01d2f003$b45408e0$1cfc1aa0$@kddi.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-GB
Archived-At: <https://mailarchive.ietf.org/arch/msg/l3sm/1usxItW9oII7rJTzOKVllwcVQjU>
Subject: Re: [L3sm] Next Step of RFC8049
X-BeenThere: l3sm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: L3VPN Service YANG Model discussion group <l3sm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/l3sm>, <mailto:l3sm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/l3sm/>
List-Post: <mailto:l3sm@ietf.org>
List-Help: <mailto:l3sm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/l3sm>, <mailto:l3sm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Jun 2017 09:26:21 -0000

Ok, if this case is the reason for having the customer-name field in the 
model, then it definitely needs a lot more explanation!

     David


On 28/06/2017 12:43, Ogaki, Kenichi wrote:
> Hi David,
>
> At least in *our* service, a Tier2-provider just sells the Tier1-provider's service with some additional values, and the original service is operated by the Tier1-provider, not by the Tier2-provider. Then, a Tier1-provider must know which vpn/site/site-network-access is used by which end-user in order to provide smooth activation/commissioning and operation.
>
> Thanks,
> Kenichi
>
> -----Original Message-----
> From: David Ball [mailto:daviball@cisco.com]
> Sent: Tuesday, June 27, 2017 8:53 PM
> To: Ogaki, Kenichi; stephane.litkowski@orange.com; 'Qin Wu'; l3sm@ietf.org
> Subject: Re: [L3sm] Next Step of RFC8049
>
> Thanks Kenichi - there is one of your answers that I'm still confused about, see below:
>
>
>
> On 26/06/2017 04:23, Ogaki, Kenichi wrote:
>
>
> 			4.	Under the VPN service, there is a leaf for the customer name.  If the model is supposed to represent the request from a customer to the SP, I would have thought the customer name would be known out-of-band, e.g. from the AAA for the request?  It would be bad if one customer could request things for another customer by filling in a different customer name in the model!
> 					
> 				[KO] A customer can only access the model instance of that customer. Please see section 10.
> 			
> 			
> 			[DB] Yes exactly - if a customer can only access their own instance of the model, why does the customer name need to be specified within the model?  You already know you are dealing with that customer's instance of the model.  It seems like the customer-name leaf is unnecessary?
> 			
> 			[KO] As common usecases, a VPN service is provided not only by Tier 1 providers, but also by Tier 2 providers or IT divisions of enterprises in order to provide their own end users by using a Tier 1 provider's VPN service. Such customers usually requires this kind of attributes for their management purposes.
>
> 		[DB2]
> 		I didn't really follow this, sorry.  The module contains the
> 		information that needs to be sent from the customer to the SP, right?
> 		If the customer using the model (i.e. the Tier2 in your above example)
> 		needs to track which of their own customers the service is for, that's
> 		something that's internal to them, isn't it?
>
> 	[KO3] Yes, that's internal to them, but they (i.e. our customers) really request and are currently using this. Then, we need to model this.
>
>
> Perhaps I am misunderstanding the scenario.
>
> If I understand correctly, the case is where the yang is being used between a Tier2 provider (lets call them T2-telecom) and Tier1 provider (lets call them T1-networks).  In other words, from the perspective of the RFC and the yang module, T1-networks is the SP and T2-telecom is the customer.
>
> T2-telecom has their own customers call them (foo-bank, bar-supermarket and baz-advertising).  Whenever T2-telecom orders a new VPN from T1-networks, they want to record, in their internal systems, which of their end customers the new VPN is for.  Of course there is probably a lot of other information they want to store in their internal systems about their customers, such as contact info, billing and invoicing info, trouble tickets, etc.
>
> What I don't understand is why T2-telecom would want to send the name of their end-customer (foo-bank, bar-supermarket or baz-advertising) to T1-networks as part of the netconf request when they order a new VPN.  What is T1-networks going to do with this information?
>
>
>      David
>
>

-- 
David Ball
<daviball@cisco.com>