Walter Weiss | 6 Apr 2002 04:20
Picon

Re: [Diffserv] Re: why i should like pibs

John,

Sorry for the late reply. I missed your posting.

Comments follow inline.

regards,

-Walter

----------
[snip]
> The fundamental problem with distributing policy to traffic-forwarding
> devices rather than translating policy into configurations under the
> constraints of the composition (topology) and capabilities of the
> devices in the path of the traffic remains. It is essentially wishful
> thinking that individual devices can determine the correct configuration
> of their local parameters without the domain-wide information. I have
> not been persuaded that the capability-exchange between the PEP and PDP
> solves this problem. There are hints of importance of the domain-wide
> context in DiffServ's per-domain behavior (PDB) specifications.
>
I can't speak for others but the capabilities aspects of COPS-PR have always
troubled me although for slightly different reasons. It is my view that
capabilities are abstractions of implementations. However, it is difficult
to decide where to stop. It is fine to say that a router supports
classification. But it is not that simple. A policy server (and I use the
term very loosely :) would also like to know how many classifiers, whether
ranges or lists are supported, and where classifiers can be placed in a
datapath. There is far more complexity in representing capabilities than it
(Continue reading)

Sahita, Ravi | 15 Apr 2002 18:12
Picon
Favicon

RE: why i should like pibs

Randy,

Here's a link to our open-source implementation 
of a client side SDK for COPS. This link should 
provide you with more information related to the 
usefulness of PIBs. The SDK also provides source 
code for a SPPI (RFC3159) compliant PIB 
Compiler/Client Control Interface Generator that 
integrates into the SDK. 
The SDK is at: http://www.intel.com/labs/manage/cops/

Hopefully, this demonstrates industry commitment 
to deliver quality and readily available 
tools for easy PIB development.

Regards,
Ravi

-----Original Message-----
From: Randy Bush [mailto:randy <at> psg.com] 
Sent: Monday, March 18, 2002 6:13 AM
To: rap <at> ops.ietf.org; diffserv <at> ietf.org
Cc: ipsec-policy <at> vpnc.org
Subject: why i should like pibs

wearing my iesg hat but being just a stupid operator, i am trying to
understand the pib/mib controversy.  fyi, i currently use snmp heavily for
monitoring devices on my network.  i configure using large db-driven code
and spew text-based cli to the devices.

(Continue reading)

Internet-Drafts | 19 Apr 2002 13:23
Picon
Favicon

I-D ACTION:draft-ietf-rap-cops-tls-03.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Resource Allocation Protocol Working Group of the IETF.

	Title		: COPS Over TLS
	Author(s)	: J. Walker, A. Kulkarni
	Filename	: draft-ietf-rap-cops-tls-03.txt
	Pages		: 7
	Date		: 18-Apr-02
	
This memo describes how to use TLS to secure COPS connections over 
the Internet.  
Please send comments on this document to the rap <at> ops.ietf.org 
mailing list.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-rap-cops-tls-03.txt

To remove yourself from the IETF Announcement list, send a message to 
ietf-announce-request with the word unsubscribe in the body of the message.

Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-rap-cops-tls-03.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.
(Continue reading)

Internet-Drafts | 19 Apr 2002 13:23
Picon
Favicon

I-D ACTION:draft-ietf-rap-cops-tls-03.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Resource Allocation Protocol Working Group of the IETF.

	Title		: COPS Over TLS
	Author(s)	: J. Walker, A. Kulkarni
	Filename	: draft-ietf-rap-cops-tls-03.txt
	Pages		: 7
	Date		: 18-Apr-02
	
This memo describes how to use TLS to secure COPS connections over 
the Internet.  
Please send comments on this document to the rap <at> ops.ietf.org 
mailing list.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-rap-cops-tls-03.txt

To remove yourself from the IETF Announcement list, send a message to 
ietf-announce-request with the word unsubscribe in the body of the message.

Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-rap-cops-tls-03.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.
(Continue reading)

Nguyen Thi Mai Trang | 22 Apr 2002 19:06
Picon
Picon

SLA concept in Intserv/RSVP

Hi everybody,

I have a question about the notion of SLA (service level agreement) in Intserv/RSVP but I don't know where to
post it
because the group Intserv is no longer active.

It seems that the notion SLA was born in Diffserv architecture. The SLA is necessary because network
resources are
statically provisioned. It's very clear.

In Intserv/RSVP, I don't find the SLA/SLS (service level specification) concept in all concerning
draft/RFCs . I
wonder if there is no SLA/SLS concept in Intserv/RSVP, how we can make policy decision in Intserv/RSVP.

Some clarifications:
In Intserv/RSVP, client uses RSVP to request resource in the routers. The routers verify if it has sufficiently
resources (Admission control) and the user has the right to request this amount of resource (Policy
control) or not.
If both are positives, it makes the resource reservation for this flow. My question is that if there is no SLA/SLS,
how the network can answer (using COPS-RSVP for example) to the question "Does this client has the right to request
such a reservation ?" ?

Thank you very much,
Mai Trang

Rawlins, Diana | 22 Apr 2002 19:31
Favicon

RE: SLA concept in Intserv/RSVP

Mai,

A policy server can contain these SLA policies. When a RSVP triggers a COPS
REQUEST, from the PEP (router) to the PDP (policy server) the DECISION
returned by the PDP reflects whether the resources requested by the RSVP
message is within the SLA. 

http://ietf.org/rfc/rfc2749.txt

Another means is that the SLA policy is provisioned into the RSVP router and
the policy, if present is used during local RSVP processing.

http://ietf.org/internet-drafts/draft-ietf-rap-rsvppcc-pib-01.txt

-Diana

-----Original Message-----
From: Nguyen Thi Mai Trang [mailto:trnguyen <at> enst.fr] 
Sent: Monday, April 22, 2002 12:07 PM
To: ietf <at> ietf.org
Cc: rap <at> ops.ietf.org
Subject: SLA concept in Intserv/RSVP

Hi everybody,

I have a question about the notion of SLA (service level agreement) in
Intserv/RSVP but I don't know where to post it
because the group Intserv is no longer active.

It seems that the notion SLA was born in Diffserv architecture. The SLA is
(Continue reading)

Yacine El Mghazli | 23 Apr 2002 10:20
Picon

[Fwd: I-D ACTION:draft-yacine-ppvpn-2547bis-pib-00.txt]

Please find bellow a new draft describing the BGP/MPLS VPN PIB.

thanks,
yacine

-------- Message d'origine --------
Objet: I-D ACTION:draft-yacine-ppvpn-2547bis-pib-00.txt
Date: Fri, 12 Apr 2002 08:02:45 -0400
De: Internet-Drafts <at> ietf.org
Répondre-A: Internet-Drafts <at> ietf.org
A: IETF-Announce: ;
CC: ppvpn <at> ppvpn.francetelecom.com

A New Internet-Draft is available from the on-line Internet-Drafts
directories.

	Title		: BGP/MPLS VPN Policy Information Base
	Author(s)	: Y. El Mghazli
	Filename	: draft-yacine-ppvpn-2547bis-pib-00.txt
	Pages		: 29
	Date		: 11-Apr-02
	
This document describes a Policy Information Base (PIB) for a device
implementing the BGP/MPLS VPN [2547bis] Architecture. The
Provisioning Classes defined here provide policy control of resources
implementing the BGP/MPLS VPN Architecture. These Provisioning
Classes can be used with other non BGP/MPLS VPN Provisioning Classes
(defined in other PIBs) to provide for a comprehensive policy
controlled mapping of service requirements to device resource
capability and usage.
(Continue reading)

Hahn, Scott | 26 Apr 2002 03:20
Picon
Favicon

Test - please ignore

Just checking to see if the list is functioning properly.


Gmane