[OPSAWG] [Editorial Errata Reported] RFC9291 (7162)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 13 October 2022 11:23 UTC

To: rfc-editor@rfc-editor.org
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: nmalykh@ieee.org, mohamed.boucadair@orange.com, oscar.gonzalezdedios@telefonica.com, samier.barguilgiraldo.ext@telefonica.com, luis-angel.munoz@vodafone.com, opsawg@ietf.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20221013112302.4125B13376E@rfcpa.amsl.com>
Date: Thu, 13 Oct 2022 04:23:02 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/T2OeTMFVajmXva5bMwK0RHXk0XA>
Subject: [OPSAWG] [Editorial Errata Reported] RFC9291 (7162)
Precedence: list

The following errata report has been submitted for RFC9291,
"A YANG Network Data Model for Layer 2 VPNs".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7162

--------------------------------------
Type: Editorial
Reported by: Nikolai Malykh <nmalykh@ieee.org>

Section: 9

Original Text
-------------
   'ethernet-segments' and 'vpn-services':  An attacker who is able to
      access network nodes can undertake various attacks, such as
      deleting a running L2VPN service, interrupting all the traffic of
      a client.  In addition, an attacker may modify the attributes of a
      running service (e.g., QoS, bandwidth) or an ES, leading to
      malfunctioning of the service and therefore to SLA violations.  In
      addition, an attacker could attempt to create an L2VPN service,
      add a new network access, or intercept/redirect the traffic to a
      non-authorized node.  In addition to using NACM to prevent
      authorized access, such activity can be detected by adequately
      monitoring and tracking network configuration changes.


Corrected Text
--------------
   'ethernet-segments' and 'vpn-services':  An attacker who is able to
      access network nodes can undertake various attacks, such as
      deleting a running L2VPN service, interrupting all the traffic of
      a client.  In addition, an attacker may modify the attributes of a
      running service (e.g., QoS, bandwidth) or an ES, leading to
      malfunctioning of the service and therefore to SLA violations.  In
      addition, an attacker could attempt to create an L2VPN service,
      add a new network access, or intercept/redirect the traffic to a
      non-authorized node.  In addition to using NACM to prevent
      unauthorized access, such activity can be detected by adequately
      monitoring and tracking network configuration changes.


Notes
-----
Typo in last sentence, should be "unauthorized".

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC9291 (draft-ietf-opsawg-l2nm-19)
--------------------------------------
Title               : A YANG Network Data Model for Layer 2 VPNs
Publication Date    : September 2022
Author(s)           : M. Boucadair, Ed., O. Gonzalez de Dios, Ed., S. Barguil, L. Munoz
Category            : PROPOSED STANDARD
Source              : Operations and Management Area Working Group
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG

[OPSAWG] [Editorial Errata Reported] RFC9291 (716… RFC Errata System
Re: [OPSAWG] [Editorial Errata Reported] RFC9291 … mohamed.boucadair
Re: [OPSAWG] [Editorial Errata Reported] RFC9291 … Joe Clarke (jclarke)
Re: [OPSAWG] [Editorial Errata Reported] RFC9291 … Rob Wilton (rwilton)