Re: [Netconf] I-D Action: draft-ietf-netconf-reverse-ssh-04.txt

t.petch <ietfc@btconnect.com> Tue, 08 April 2014 16:49 UTC

Return-Path: <ietfc@btconnect.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A20DD1A03C4 for <netconf@ietfa.amsl.com>; Tue, 8 Apr 2014 09:49:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ME3z-xZjLGzz for <netconf@ietfa.amsl.com>; Tue, 8 Apr 2014 09:49:22 -0700 (PDT)
Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3lp0081.outbound.protection.outlook.com [213.199.154.81]) by ietfa.amsl.com (Postfix) with ESMTP id B3CA81A056D for <netconf@ietf.org>; Tue, 8 Apr 2014 09:49:13 -0700 (PDT)
Received: from AMSPR07MB049.eurprd07.prod.outlook.com (10.242.81.11) by AMSPR07MB294.eurprd07.prod.outlook.com (10.242.20.14) with Microsoft SMTP Server (TLS) id 15.0.913.9; Tue, 8 Apr 2014 16:49:12 +0000
Received: from DBXPRD0510HT004.eurprd05.prod.outlook.com (157.56.252.165) by AMSPR07MB049.eurprd07.prod.outlook.com (10.242.81.11) with Microsoft SMTP Server (TLS) id 15.0.918.8; Tue, 8 Apr 2014 16:49:11 +0000
Message-ID: <03ac01cf534a$3b2e2940$4001a8c0@gateway.2wire.net>
From: "t.petch" <ietfc@btconnect.com>
To: Kent Watsen <kwatsen@juniper.net>
References: <20140407150503.3491.36270.idtracker@ietfa.amsl.com> <CF68372D.6844E%kwatsen@juniper.net>
Date: Tue, 08 Apr 2014 17:44:45 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [157.56.252.165]
X-ClientProxiedBy: AMSPR07CA014.eurprd07.prod.outlook.com (10.242.225.172) To AMSPR07MB049.eurprd07.prod.outlook.com (10.242.81.11)
X-Forefront-PRVS: 017589626D
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009001)(6009001)(428001)(479174003)(377454003)(189002)(199002)(51704005)(164054003)(24454002)(377424004)(13464003)(23756003)(76482001)(85306002)(93516002)(74662001)(85852003)(84392001)(50466002)(66066001)(74366001)(31966008)(59766001)(77982001)(80976001)(83072002)(62966002)(63696002)(61296002)(49866001)(79102001)(53806002)(65816001)(44716002)(50986002)(54316003)(44736004)(80022001)(74706001)(74876001)(62236002)(81342001)(15975445006)(4396001)(56776001)(74502001)(47776003)(98676001)(94946001)(81542001)(50226001)(20776003)(46102001)(95416001)(99396002)(87976001)(94316002)(86362001)(69226001)(90146001)(77096001)(42186004)(97336001)(56816005)(92726001)(88136002)(77156001)(97186001)(89996001)(14496001)(92566001)(76786001)(76796001)(93916002)(93136001)(95666003)(33646001)(19580405001)(83322001)(87266001)(87286001)(19580395003)(47446003)(47976002)(47736002)(74416001)(7726001); DIR:OUT; SFP:1101; SCL:1; SRVR:AMSPR07MB049; H:DBXPRD0510HT004.eurprd05.prod.outlook.com; FPR:3CCCF175.ACF2EFCA.B5FF914B.46E9DA5D.203C3; MLV:sfv; PTR:InfoNoRecords; MX:1; A:0; LANG:en;
Received-SPF: None (: btconnect.com does not designate permitted sender hosts)
X-OriginatorOrg: btconnect.com
Archived-At: http://mailarchive.ietf.org/arch/msg/netconf/t8f0T6crLMVmgrl9R8OZ-wZ2c1s
Cc: netconf@ietf.org
Subject: Re: [Netconf] I-D Action: draft-ietf-netconf-reverse-ssh-04.txt
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Apr 2014 16:49:32 -0000

Kent

I saw your exchange with Alan about the paragraph starting

"However, configuring distinct host keys on the management system
   doesn't scale well, which is an important consideration to a network
   management system.  "

That sounds plausible but seems to me to undermine the use of SSH for
NETCONF generally, nothing to do with call home.  Why is this not an
implicit update to RFC4742?

Tom Petch

----- Original Message -----
From: "Kent Watsen" <kwatsen@juniper.net>
To: <internet-drafts@ietf.org>; <i-d-announce@ietf.org>
Cc: <netconf@ietf.org>
Sent: Monday, April 07, 2014 4:28 PM
>
> Please see the Change Log to see what's new in the draft.
>
> I have not heard back from Steve yet on the Applicability Statement.
This
> is the only open issue I'm aware of and otherwise the draft is ready
for
> last call.
>
> The draft contains a reference to "draft-ietf-netconf-server-model",
which
> doesn't exist yet, as that draft was last submitted as
> "draft-kwatsen-netconf-server" and hasn't been updated yet.  I don't
> believe this is an issue since the reference happens in text that
clearly
> says the model is outside the scope.
>
> PS: Bert, I'm already using the xml2rfc v2 script
>
> Thanks,
> Kent
>
>
>
> On 4/7/14 11:05 AM, "internet-drafts@ietf.org"
<internet-drafts@ietf.org>
> wrote:
>
> >
> >A New Internet-Draft is available from the on-line Internet-Drafts
> >directories.
> > This draft is a work item of the Network Configuration Working Group
of
> >the IETF.
> >
> >        Title           : Reverse SSH for NETCONF Call Home
> >        Author          : Kent Watsen
> > Filename        : draft-ietf-netconf-reverse-ssh-04.txt
> > Pages           : 10
> > Date            : 2014-04-07
> >
> >Abstract:
> >   This document presents a technique for a NETCONF server to
initiate a
> >   SSH connection to a NETCONF client.  This is accomplished by the
> >   NETCONF client listening on IANA-assigned TCP port YYYY and
starting
> >   the SSH client protocol immediately after accepting a TCP
connection
> >   on it.  This role-reversal is necessary as the NETCONF server must
> >   also be the SSH server, in order for the NETCONF client to open
the
> >   IANA-assigned SSH subsystem "netconf".
> >
> >
> >The IETF datatracker status page for this draft is:
> >https://datatracker.ietf.org/doc/draft-ietf-netconf-reverse-ssh/
> >
> >There's also a htmlized version available at:
> >http://tools.ietf.org/html/draft-ietf-netconf-reverse-ssh-04
> >
> >A diff from the previous version is available at:
> >http://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-reverse-ssh-04
> >
> >
> >Please note that it may take a couple of minutes from the time of
> >submission
> >until the htmlized version and diff are available at tools.ietf.org.
> >
> >Internet-Drafts are also available by anonymous FTP at:
> >ftp://ftp.ietf.org/internet-drafts/
> >
> >_______________________________________________
> >Netconf mailing list
> >Netconf@ietf.org
> >https://www.ietf.org/mailman/listinfo/netconf
> >
> >
>
>
> _______________________________________________
> Netconf mailing list
> Netconf@ietf.org
> https://www.ietf.org/mailman/listinfo/netconf