Re: [secdir] Secdir review of draft-ietf-ccamp-microwave-framework-05

[Daniele Ceccarelli <[e-mail]>]

Hi Radia,

let me reply on behalf of the authors. First of all many thanks for your review.

Regarding your question about traditional NMS vs SDN I agree with you on the fact that they are evolving towards a common component and the distinction is quite blurry, but there is still plenty of networks where NMS is still considered as the implementation of the management plane while SDN the centralization of the control plane and they are still kept as separate things.

Hence, since the authors speak about “traditional” NMS and SDN I would tend to allow for the distinction to be kept. If you prefer a note speaking about the convergence of the two things can be added.

Thanks a lot
Daniele  (ccamp co-chair)

From: Radia Perlman [mailto:[e-mail]]
Sent: lunedì 7 maggio 2018 08:55
To: [e-mail]; The IESG <[e-mail]>; [e-mail]
Subject: Secdir review of draft-ietf-ccamp-microwave-framework-05

Sorry...resending because I mistyped the author address.


---------- Forwarded message ----------
From: Radia Perlman <[e-mail]<mailto:[e-mail]>>
Date: Sun, May 6, 2018 at 11:48 PM
Subject: Secdir review of draft-ietf-ccamp-microwave-framework-05
To: [e-mail]<mailto:[e-mail]>, The IESG <[e-mail]<mailto:[e-mail]>>, [e-mail]<mailto:[e-mail]>

Summary:  No security issues found, but I do have questions, and there are editing glitches

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area
directors.  Document editors and WG chairs should treat these comments just
like any other last call comments.

This document describes the management interface for microwave radio links.
It advocates (correctly, I believe) that such an interface should be extensible to provide for vendor-specific features.

I don't understand the difference between a "a traditional network management system" and SDN.  Perhaps it is not the job of this document to clearly make the distinction, and I suspect there is no real distinction...setting parameters (traditional network management) is a way of "programming" an interface ("SDN").

This document could use an editing pass for glitches, but these glitches do not impact its readability.

The glitches consist  mostly of leaving out little words like "of" in the following sentence.
"The adoption of an SDN framework for management and
   control the microwave interface is one of the key applications for
   this work."

The security considerations say that they assume a secure transport layer (authenticated, probably encryption isn't necessary) for communication.  Other than that, perhaps, there might be security considerations for inadvertently setting parameters incorrectly, or maliciously by a trusted administrator.  But this document does not specify the specific parameters to be managed, just a general framework.

Radia