Re: [netmod] draft-ietf-netmod-acl-model
"Jon Shallow" <supjps-ietf@jpshallow.com> Thu, 05 October 2017 08:08 UTC
Return-Path: <supjps-ietf@jpshallow.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7E7C13416B for <netmod@ietfa.amsl.com>; Thu, 5 Oct 2017 01:08:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pShWFp-NWXNG for <netmod@ietfa.amsl.com>; Thu, 5 Oct 2017 01:08:15 -0700 (PDT)
Received: from mail.jpshallow.com (mail.jpshallow.com [217.40.240.153]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CA671321CB for <netmod@ietf.org>; Thu, 5 Oct 2017 01:08:15 -0700 (PDT)
Received: from [127.0.0.1] (helo=N01332) by mail.jpshallow.com with smtps (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.89) (envelope-from <jon.shallow@jpshallow.com>) id 1e01CX-0004rJ-5F; Thu, 05 Oct 2017 09:08:13 +0100
From: Jon Shallow <supjps-ietf@jpshallow.com>
To: 'Mahesh Jethanandani' <mjethanandani@gmail.com>, netmod@ietf.org
References: <050801d33b9c$ed929560$c8b7c020$@jpshallow.com> <E55D4FCD-77F4-49BF-8200-FEF663D98966@gmail.com>
In-Reply-To: <E55D4FCD-77F4-49BF-8200-FEF663D98966@gmail.com>
Date: Thu, 05 Oct 2017 09:08:13 +0100
Message-ID: <077701d33db1$17aa5160$46fef420$@jpshallow.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0778_01D33DB9.796F7CB0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQJ18Axf/JP9v/XDquaZDSgLRAtNwwG+35yAoYGJh9A=
Content-Language: en-gb
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/hjqpqzVwbkHk7hAuCoIfeTF3S-8>
Subject: Re: [netmod] draft-ietf-netmod-acl-model
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Oct 2017 08:08:18 -0000
Hi Mahesh, I think that we can with a bit of re-work, use the interfaces concept. The clue that I had missed was in the (now deleted in -04) text in the following section. A.2. A company proprietary module example Access control list typically does not exist in isolation. Instead, they are associated with a certain scope in which they are applied, for example, an interface of a set of interfaces. How to attach an access control list to an interface (or other system artifact) is outside the scope of this model, as it depends on the specifics of the system model that is being applied. However, in general, the general design pattern will involved adding a data node with a reference, or set of references, to ACLs that are to be applied to the interface. For this purpose, the type definition "access- control-list-ref" can be used. Thanks for your help. Regards Jon From: Mahesh Jethanandani [mailto: mjethanandani@gmail.com] Sent: 04 October 2017 00:57 To: Jon Shallow Cc: netmod@ietf.org Subject: Re: [netmod] draft-ietf-netmod-acl-model Jon, ‘ordered-by user’ directive is useful to have on list of ACLs as/when they are applied. For example, in the latest published draft (-14) we added the 'ordered-by user’ statement to the list of ACLs when they are applied to the interfaces. You would not order the “global” ACLs list (under access-lists), because another interface may want a different order of ACLs. Does that help?
- [netmod] draft-ietf-netmod-acl-model Jon Shallow
- Re: [netmod] draft-ietf-netmod-acl-model Mahesh Jethanandani
- Re: [netmod] draft-ietf-netmod-acl-model Jon Shallow