Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-00.txt

Kent Watsen <kwatsen@juniper.net> Tue, 01 July 2014 13:13 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 012821A01F6 for <netconf@ietfa.amsl.com>; Tue, 1 Jul 2014 06:13:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nOlli7PLprdu for <netconf@ietfa.amsl.com>; Tue, 1 Jul 2014 06:13:34 -0700 (PDT)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1lp0142.outbound.protection.outlook.com [207.46.163.142]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 096651A01F3 for <netconf@ietf.org>; Tue, 1 Jul 2014 06:13:33 -0700 (PDT)
Received: from CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) by CO1PR05MB458.namprd05.prod.outlook.com (10.141.72.140) with Microsoft SMTP Server (TLS) id 15.0.969.15; Tue, 1 Jul 2014 13:13:31 +0000
Received: from CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.34]) by CO1PR05MB458.namprd05.prod.outlook.com ([169.254.10.34]) with mapi id 15.00.0969.007; Tue, 1 Jul 2014 13:13:31 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-00.txt
Thread-Index: AQHPlQQHUCZ3qL9hokqUPW/1uav6LpuK72gA
Date: Tue, 01 Jul 2014 13:13:30 +0000
Message-ID: <CFD829B3.790BE%kwatsen@juniper.net>
References: <20140701081056.11394.75518.idtracker@ietfa.amsl.com>
In-Reply-To: <20140701081056.11394.75518.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.4.3.140616
x-originating-ip: [66.129.241.12]
x-microsoft-antispam: BCL:0;PCL:0;RULEID:
x-forefront-prvs: 02596AB7DA
x-forefront-antispam-report: SFV:NSPM; SFS:(6009001)(24454002)(377454003)(189002)(199002)(51704005)(377424004)(479174003)(83322001)(19580405001)(19580395003)(101416001)(74662001)(85306003)(99396002)(77096002)(107046002)(106356001)(80022001)(85852003)(106116001)(2351001)(64706001)(81542001)(83072002)(20776003)(2656002)(66066001)(76482001)(87936001)(81342001)(86362001)(107886001)(92726001)(50986999)(36756003)(4396001)(105586002)(95666004)(99286002)(21056001)(83506001)(76176999)(54356999)(77982001)(46102001)(79102001)(74502001); DIR:OUT; SFP:; SCL:1; SRVR:CO1PR05MB458; H:CO1PR05MB458.namprd05.prod.outlook.com; FPR:; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Content-Type: text/plain; charset="us-ascii"
Content-ID: <EAED70BAF33C6C49AC1536EB9E3FA7CD@namprd05.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/Mvwuk63-Ru2Rahq23zUJJcKBbmg
Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-zerotouch-00.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Jul 2014 13:13:41 -0000

All,

This update takes into account all the comments received since the last
update.  Specifically:

    * Major structural update; the essence is the same.  Most every
      section was rewritten to some degree.
    * Added a Use Cases section
    * Added diagrams for "Actors and Roles" and "NMS Precondition"
      sections, and greatly improved the "Device Boot Sequence" diagram
    * Removed support for physical presence or any ability for
      Configlets to not be signed.
    * Defined the ZeroTouch Information DHCP option
    * Added an ability for devices to also download images from
      Configuration Servers
    * Added an ability for Configlets to be encrypted
    * Now Configuration Servers only have to support HTTP/S - no other
      schemes possible

    * Posted as a WG document


As of now, all the drafts reverse-ssh, netconf-server-model, and zerotouch
have been updated and again represent a consistent set.  It's best to read
them in that order, as they build on top of each other that way.

Please review before Toronto so we can have good discussion.

Cheers,
Kent




On 7/1/14, 4:10 AM, "internet-drafts@ietf.org" <internet-drafts@ietf.org>
wrote:

>
>A New Internet-Draft is available from the on-line Internet-Drafts
>directories.
> This draft is a work item of the Network Configuration Working Group of
>the IETF.
>
>        Title           : Zero Touch Provisioning for NETCONF Call Home
>(ZeroTouch)
>        Authors         : Kent Watsen
>                          Stephen Hanna
>                          Joe Marcus Clarke
>                          Mikael Abrahamsson
>	Filename        : draft-ietf-netconf-zerotouch-00.txt
>	Pages           : 29
>	Date            : 2014-06-30
>
>Abstract:
>   This draft presents a technique for establishing a secure NETCONF
>   connection between a newly deployed IP-based device, configured with
>   just its factory default settings, and the new owner's Network
>   Management System (NMS).
>
>
>The IETF datatracker status page for this draft is:
>https://datatracker.ietf.org/doc/draft-ietf-netconf-zerotouch/
>
>There's also a htmlized version available at:
>http://tools.ietf.org/html/draft-ietf-netconf-zerotouch-00
>
>
>Please note that it may take a couple of minutes from the time of
>submission
>until the htmlized version and diff are available at tools.ietf.org.
>
>Internet-Drafts are also available by anonymous FTP at:
>ftp://ftp.ietf.org/internet-drafts/
>
>_______________________________________________
>Netconf mailing list
>Netconf@ietf.org
>https://www.ietf.org/mailman/listinfo/netconf