Re: [L3sm] [l3sm] #20 (draft-ltsd-l3sm-l3vpn-service-model): Placement of the management branch

"Landry, Jean-Philippe" <jplandry@bell.ca> Fri, 02 September 2016 16:29 UTC

Return-Path: <jplandry@bell.ca>
X-Original-To: l3sm@ietfa.amsl.com
Delivered-To: l3sm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 130BE12D8D6 for <l3sm@ietfa.amsl.com>; Fri, 2 Sep 2016 09:29:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ICB2YxkLKfqj for <l3sm@ietfa.amsl.com>; Fri, 2 Sep 2016 09:29:51 -0700 (PDT)
Received: from mail1.bemta3.messagelabs.com (mail1.bemta3.messagelabs.com [195.245.230.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F416D12D8D4 for <l3sm@ietf.org>; Fri, 2 Sep 2016 09:29:50 -0700 (PDT)
Received: from [85.158.137.83] by server-13.bemta-3.messagelabs.com id 0A/C3-06162-BF8A9C75; Fri, 02 Sep 2016 16:29:47 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBKsWRWlGSWpSXmKPExsVybg1jsu7vFSf DDbp3SVt09b1jtfg6cSGQ2PuQ1YHZY8mSn0weB3Y+YvRoeXaSLYA5ijUzLym/IoE1Y/lzx4Id MhV71y1gbmC8Id7FyMkhIeAn8XfVM7YuRi4OIYF9jBITl7xgh3CuM0o8uP+KGaRKSOAUo8TXr iAQm03AQGL5sV42EFtEIFti3vaHjCA2s4CyxLzWbawgtrBApsTTP9eYIWqyJL7eucsEYbtJvN gyH6yGRUBFYtKDz2C9vAI+Erv2f2GD2LWWSWL7YQ2QIzgFOhklfnYvZAdJMArISmyY+I0FYpm 4xK0n85kgXhCQWLLnPDOELSrx8vE/VgjbQGLr0n0sELa8xM0JE9kgevUkbkydAmVrSyxb+JoZ 4ghBiZMzn0DVS0ocXHGDBeIgWYnjB/dCg2g2o8SK2T8ZIYrsJR5e/so0gVF6FpKbZiHZMQvJj llIdixgZFnFqFGcWlSWWqRrZKqXVJSZnlGSm5iZo2toYKyXm1pcnJiempOYVKyXnJ+7iREY6/ UMDIw7GFtP+B1ilORgUhLlfRBwMlyILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO+y5UA5waLU9NS KtMwcYNKBSUtw8CiJ8LaDpHmLCxJzizPTIVKnGHU51s29sZZJiCUvPy9VSpzXHaRIAKQoozQP bgQsAV5ilJUS5mVkYGAQ4ilILcrNLEGVf8UozsGoJMzbDzKFJzOvBG7TK6AjmICOKLl2HOSIk kSElFQD45ypRovNYlKuswdqhV2bf+r8jXWOke3hjTzzn7OfYddLDdU6867pmRr3ZgMe9XOuUY EP00pXznpUqbGvcvWu+ElR4R9jIq+zrCpdMv+W8zrmuftvHetRbOUSd550+WLAxcvBFy8/Lr/ DnKj1zWzlgtdbLv6XXu+8s2t1zztG9fuLuav+33Wb8lCJpTgj0VCLuag4EQDTIjmKewMAAA==
X-Env-Sender: jplandry@bell.ca
X-Msg-Ref: server-11.tower-140.messagelabs.com!1472833786!48110952!2
X-Originating-IP: [206.172.1.99]
X-StarScan-Received:
X-StarScan-Version: 8.84; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 25565 invoked from network); 2 Sep 2016 16:29:47 -0000
Received: from tls.exchange.bell.ca (HELO Tls.exchange.bell.ca) (206.172.1.99) by server-11.tower-140.messagelabs.com with DHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 2 Sep 2016 16:29:47 -0000
X-CrossPremisesHeadersFilteredBySendConnector: EX13EDGE02-DOR.bell.corp.bce.ca
Received: from DG2MBX02-DOR.bell.corp.bce.ca (198.235.121.231) by EX13EDGE02-DOR.bell.corp.bce.ca (198.235.121.55) with Microsoft SMTP Server id 15.0.1076.9; Fri, 2 Sep 2016 12:18:48 -0400
Received: from DG2MBX04-DOR.bell.corp.bce.ca (2002:8e75:d119::8e75:d119) by DG2MBX02-DOR.bell.corp.bce.ca (2002:8e75:d117::8e75:d117) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 2 Sep 2016 12:29:45 -0400
Received: from DG2MBX04-DOR.bell.corp.bce.ca ([fe80::2801:6a43:d689:71d5]) by DG2MBX04-DOR.bell.corp.bce.ca ([fe80::2801:6a43:d689:71d5%23]) with mapi id 15.00.1104.000; Fri, 2 Sep 2016 12:29:45 -0400
From: "Landry, Jean-Philippe" <jplandry@bell.ca>
To: "stephane.litkowski@orange.com" <stephane.litkowski@orange.com>, "Ogaki, Kenichi" <ke-oogaki@kddi.com>
Thread-Topic: [L3sm] [l3sm] #20 (draft-ltsd-l3sm-l3vpn-service-model): Placement of the management branch
Thread-Index: AQHSA9VV9UCHiWgzQEWau+NkwV+iEKBl4hGAgAA92pCAAH6lAP//v95w
Date: Fri, 02 Sep 2016 16:29:45 +0000
Message-ID: <739aafbe02c240b29be1a0c84136102d@DG2MBX04-DOR.bell.corp.bce.ca>
References: <056.cd7c7d404d8e791f2e6d82b75ca1dc10@tools.ietf.org> <01d801d204d3$57361b60$05a25220$@kddi.com> <aa7732c81b924b5d8dd43dad255dee8a@DG2MBX04-DOR.bell.corp.bce.ca> <21301_1472831369_57C99F89_21301_2713_1_9E32478DFA9976438E7A22F69B08FF921BD6714E@OPEXCLILMA4.corporate.adroot.infra.ftgroup>
In-Reply-To: <21301_1472831369_57C99F89_21301_2713_1_9E32478DFA9976438E7A22F69B08FF921BD6714E@OPEXCLILMA4.corporate.adroot.infra.ftgroup>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.24.25.8]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Received-SPF: SoftFail (EX13EDGE02-DOR.bell.corp.bce.ca: domain of transitioning jplandry@bell.ca discourages use of 198.235.121.231 as permitted sender)
X-OrganizationHeadersPreserved: EX13EDGE02-DOR.bell.corp.bce.ca
Archived-At: <https://mailarchive.ietf.org/arch/msg/l3sm/fawSFZ35v17whPY8wVW9dzcMumY>
Cc: "l3sm@ietf.org" <l3sm@ietf.org>
Subject: Re: [L3sm] [l3sm] #20 (draft-ltsd-l3sm-l3vpn-service-model): Placement of the management branch
X-BeenThere: l3sm@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: L3VPN Service YANG Model discussion group <l3sm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/l3sm>, <mailto:l3sm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/l3sm/>
List-Post: <mailto:l3sm@ietf.org>
List-Help: <mailto:l3sm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/l3sm>, <mailto:l3sm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Sep 2016 16:29:53 -0000

Yes, from my perspective this would indeed work.

In my initial comment I foresaw that 1:N CE to site-network-access capability could still be preserved if the model specified that management information would either have to be repeated on all site-network-accesses or be specified on at least one of them for any given CE (diversity constraint "same-CE" being the "glue" that carried the notion of common CE across the different site-network-access). Your approach is cleaner and more direct. 

I also agree that customer either want to manage their CEs or they don't for any given site they may own. Mix and matching different management types for different CEs at a given site would be over-reaching realistic requirements in my opinion.

JPL

________________________ 
Jean-Philippe Landry, Senior Technical Architect/Architecte technique principal,
New Technology Introduction, Bell Canada
1 Alexander-Graham-Bell, E2
Verdun, QC, H3E 3B3
téléphone: (514) 391-3494 
<<mailto:jplandry@bell.ca>> 
https://session.collaboration.bell.ca/join/krcwz 



-----Original Message-----
From: stephane.litkowski@orange.com [mailto:stephane.litkowski@orange.com] 
Sent: Friday, September 02, 2016 11:49 AM
To: Landry, Jean-Philippe; Ogaki, Kenichi
Cc: l3sm@ietf.org
Subject: RE: [L3sm] [l3sm] #20 (draft-ltsd-l3sm-l3vpn-service-model): Placement of the management branch

Supporting Dual and single CE sounds important to me as well. I thought it was supported but it was a mistake or we broke something at a certain point, but anyway ...
It's not a trivial change and we need to take care.

What we have now is the notion of site which is globally a customer location that need to be attached to SP network. The attachment is done through site-network-accesses. Site-network-accesses can be used for subVPN as well as multihoming but we do not have the notion of CE device.
Moreover CE can be provider managed or customer managed or comanaged.
In case CE is provided by the SP, we need to know how many CEs the customer is requesting for the site and how site-network-accesses are mapped to CEs. We cannot really put management IP under site-network-accesses because this would create a 1:1 mapping between site-network-access and CE which breaks subVPN and singleCE multihomed scenarios.

So one proposal is to create a "customer-device" container under the site that will contain a list of devices with an ID.
For the management IP, it is only used for comanaged scenario but as the CE is provided by the SP, we would need a different IP per device, so we can move the management container under the list. But I do not want to open a mix of different management strategy per site (one CE provider managed, the other customer managed) so we need to explode the management container.

Container management {
	Leaf type {
	}
}
Container customer-devices {
	List customer-devices {
		Key id;
		Leaf id {
			Type string;
		}
		Container management { # only if management type is co-managed
			Leaf transport-type;
			Leaf ip-address;
		} 
	}
}
This ID can be used as a reference under site-network-access. We can add a leaf "device-id" that would be used in case of provider-managed site.

+--rw site-network-accesses
 +--rw site-network-access* [site-network-access-id]
 +--rw site-network-access-id svc-id
 +--rw site-network-access-type? identityref
 +--rw access-diversity {site-diversity}?
 | +--rw groups
 | | +--rw group* [group-id]
 | | +--rw group-id string
 +--rw device-id? 	string <<<<<


Does it sound a reasonable addition ? Any other proposal ?

Best Regards,