[Netconf] Shepherd review of draft-ietf-netconf-zerotouch-22

[Mahesh Jethanandani <[e-mail]>]

Hi Kent,

I am aware that you just published another version of the document. Most of this review was done for -22 version of the document. 

In Section 5.6, in paragraph 6 the document talks about initial configuration being applied. If an error occurs, is that initial configuration removed? If so, how? It also says that the device may not (did you mean RFC 2119’s MAY NOT?) reset itself in order to wipe out any state the preconfigure script may have left behind. That means in case of an error not only will there be initial configuration left on the device, but any state left behind by the preconfigured script. With post-configured script, the device is supposed to reset itself, removing any pre-configured state and also any initial configuration. I do not understand why with initial configuration this exception is being made (of not resetting the device and clearing any state left behind by the current or previous step).

Section 6.3. You need to add references to the RFCs that you import or reference in the YANG model, e.g. RFC 6991.

leaf-list download-uri:

I am confused by the last sentence in the description. “If a secure scheme (e.g. https) is provided, a device may (again, did you mean RFC 2119’s MAY) establish an untrusted connection to the remote server to obtain the boot-image.” Are you suggesting that the device (client) does not need to authenticate itself to the server? Most of the draft talks about the need for the device to authenticate itself for the server to validate the device-id of the requestor. Also, are you suggesting that a untrusted connection is fine because the image returned will be a signed image only? This was made somewhat clear only after seeing Appendix B diagram.

s/This doesn’t affect Security so much as Privacy/This doesn’t affect security as much as privacy/
s/the device is being directed/the device is being directed to/
s/server tis time/server this time/

Appendix C.3:

In the diagram, step 3, it says that “only if source is a bootstrap server, send progress updates”. Shouldn’t it be a “trusted bootstrap server”? The description for step 3 clarifies it.

Thanks.

Mahesh Jethanandani
[e-mail]