[Netconf] Comments on draft-ietf-netconf-netconf-client-server

"Dhanapal, Ramkumar (Nokia - IN/Chennai)" <ramkumar.dhanapal@nokia.com> Fri, 09 November 2018 11:35 UTC

Return-Path: <ramkumar.dhanapal@nokia.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5204C130DDA for <netconf@ietfa.amsl.com>; Fri, 9 Nov 2018 03:35:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.37
X-Spam-Level:
X-Spam-Status: No, score=-2.37 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ptRkxG_Q9KYU for <netconf@ietfa.amsl.com>; Fri, 9 Nov 2018 03:35:46 -0800 (PST)
Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20096.outbound.protection.outlook.com [40.107.2.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C3C8130DC8 for <netconf@ietf.org>; Fri, 9 Nov 2018 03:35:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=d5KJvwAFUY+2Yv9BGBIpDlKXjj1WaZb3KfW+QVkSsgM=; b=q+P6rSu7bD5oaK3E47M/LeTXYrMYP+gcA+MXL2rM5n+wi01Dx9btJHqh9a4WeG5rzO6vS0LQYaysJj66uLRYguGlsH9leI6EJmD4/qvEMOSezEZTLaxe6yb5zDGE8NW3mf3ADOgoETYE/9B2XnIVMX1p7QWxXRlNpVP7TDNiLrU=
Received: from HE1PR07MB4329.eurprd07.prod.outlook.com (20.176.167.14) by HE1PR07MB1049.eurprd07.prod.outlook.com (10.162.28.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.16; Fri, 9 Nov 2018 11:35:41 +0000
Received: from HE1PR07MB4329.eurprd07.prod.outlook.com ([fe80::c4d6:7c7:4669:8058]) by HE1PR07MB4329.eurprd07.prod.outlook.com ([fe80::c4d6:7c7:4669:8058%5]) with mapi id 15.20.1294.034; Fri, 9 Nov 2018 11:35:41 +0000
From: "Dhanapal, Ramkumar (Nokia - IN/Chennai)" <ramkumar.dhanapal@nokia.com>
To: "netconf@ietf.org" <netconf@ietf.org>, "kwatsen@juniper.net" <kwatsen@juniper.net>
CC: "Beauville, Yves (Nokia - BE/Antwerp)" <yves.beauville@nokia.com>, "Carey, Timothy (Nokia - US)" <timothy.carey@nokia.com>
Thread-Topic: Comments on draft-ietf-netconf-netconf-client-server
Thread-Index: AdR4HyFGnh375MLeQwOCRy8NnIuKdA==
Date: Fri, 09 Nov 2018 11:35:41 +0000
Message-ID: <HE1PR07MB4329ED3FA2BA9D4E53BBE758F8C60@HE1PR07MB4329.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ramkumar.dhanapal@nokia.com;
x-originating-ip: [135.245.121.17]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; HE1PR07MB1049; 6:hwe4Xn9HOU3t3FrzIc844h0vVe1gI2Tf6aXaWyFC6VbKH31UlNnNkTErcf5o255jliCakc9n5FnYO+tQnGqZFvbp4BYhoxykAFA3gaL50cKVruOXme4yczDAIgTxukbHyq6Ji73pLqGq4N6GnpMnoN8Rlm9+WhGJBckuLZBsZVGZweHUyZL2shH5ae0/h+Tzrwul1n9rgt1WgsoNLh7u/63gWWtCWxfEOjLCE6YdbbXOtz/wD+irWg/8JTrJppDfjsLY+XwQYymIYFKOQzYyN0wQ2a2Lw9orQsp1bXEWNqXo9ihbutzqXqV4hYzhGMtcQqQsSMVpP+vf6LpUGTG1LLRGFQKON5m7rmCAQplW/mRR0VA9i0JIktud2UoD306DpkWuztXZ1r/IqzaTuqsmElDXn5S2DD3h2tbxOJDD2kzC0lM31MqfpXhbm53YDanJmEVmytHmkJ4yRJuinou1Sw==; 5:FP08s61fdDg/WnQSRhjLydmXwK2jbGswJFlc2LQce7IIGushAxjsUP+qp++0/neCWBaPJUSNFIeQHZFgBpoJQSg3YACbEJZd6LEPE1kzJePduvJfzXXvfFiJW1ik5L/efLaC+uCx573PPdp/d5Z4yNQTQuUD4bo4GCDo/Lcd/D4=; 7:F338pW/KfEqzRHb/LjERVPSprHzfx2OplavZBohu9hrpM/+cWi/FOaXSYgwD9OM41ZMGV8Qgn5NC68TWDn4wvkJ3fDY8s5t8XuNOcLjK/JfpDjh/ER2de1Tz0ohBWlu9IqymH+4TBufQaUYjQGbpWQ==
x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR;
x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10019020)(376002)(366004)(39860400002)(396003)(346002)(136003)(189003)(199004)(1941001)(486006)(71190400001)(6116002)(4326008)(7736002)(2906002)(6436002)(8936002)(790700001)(3846002)(6306002)(14454004)(71200400001)(54906003)(25786009)(86362001)(107886003)(478600001)(53936002)(55016002)(9686003)(54896002)(7696005)(6506007)(186003)(110136005)(68736007)(26005)(106356001)(99286004)(105586002)(66066001)(14444005)(256004)(33656002)(81156014)(81166006)(476003)(5660300001)(74316002)(102836004)(97736004)(8676002)(2900100001)(2501003)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR07MB1049; H:HE1PR07MB4329.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
x-ms-office365-filtering-correlation-id: 78d2cc4b-b73e-4351-ace0-08d646377ab3
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:HE1PR07MB1049;
x-ms-traffictypediagnostic: HE1PR07MB1049:
x-microsoft-antispam-prvs: <HE1PR07MB1049910444600BF59C166E24F8C60@HE1PR07MB1049.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(21748063052155)(28532068793085)(190501279198761)(227612066756510);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231382)(11241501184)(806099)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(148016)(149066)(150057)(6041310)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB1049; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB1049;
x-forefront-prvs: 08512C5403
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: 0oKzzpClyJbVm7TOiQEeXtgKsGQDErMOAeD8a5qns2nAvS0aWQ90ScWkD/G5SbE2HlhT6Y+Sl1UiSLglxauSqEN9SOM75jt7Ihaj2/7HDANaQVYn2kF3V90bz0WCqgcnYojP5AbYcZJQ3i/9270fN7IcQFp4xRi7cVuHqdMMGMtxGalAxLE93uzn9NlnFwsAVCAau1FhmaoCsd1uMB/uay6BYG4vhGRrwZRjpH0BNcVU27YkPNYEiT6JrZbkQG40sfYicXwQZONtpgTiKgya0GsV4bk43MR/AQYe3ZoZbpYG4R36aXNQvR0l/A4/MAQB+LFneUUM0+kWguFwMGwxqDB1ZLMOinSd0KVKaJMwAp4=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_HE1PR07MB4329ED3FA2BA9D4E53BBE758F8C60HE1PR07MB4329eurp_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 78d2cc4b-b73e-4351-ace0-08d646377ab3
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Nov 2018 11:35:41.4024 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB1049
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/YPGmIJm_CIC3CwXljSi5RKqRaMg>
Subject: [Netconf] Comments on draft-ietf-netconf-netconf-client-server
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Nov 2018 11:35:48 -0000

Hi Kent and All,
We have below comments on draft-ietf-netconf-netconf-client-server

Comment 1:
We are using the 'ietf-netconf-server' module for configuration of call home parameters like netconf client endpoint IP/port, keys/certificates etc.,
For static configuration from northbound, this works fine.

Our use case is that the netconf client endpoint IP/port are learnt dynamically through DHCP process inline with BBF TR301_Issue2.
These dynamically learnt endpoints also need to be modelled in the yang.
These dynamic endpoints should also support the configuration of keys/certificates.

Comment 2:
The server keys/certificates/ca-certs are configurable per endpoint per netconf-client. We understand pinned-ca-certs/ pinned-client-certs can be per endpoint.
But for the device acting as the netconf server, we see only one set of keys/certificates is enough and need not be per endpoint.

Comment 3:
The description of 'netconf-server/listen/endpoint/transport/ssh/address' is mentioned as "The NETCONF server will listen on all configured interfaces if no value is specified".
When no value is specified, we are unable to configure 'ss:ssh-server-grouping' parameters.

Request you to look into these comments and provide your feedback.

Regards,
Ramkumar