Internet-Draft | OSPF SR MPLS YANG | January 2024 |
Qu, et al. | Expires 20 July 2024 | [Page] |
This document defines a YANG data module that can be used to configure and manage OSPF Extensions for Segment Routing for the MPLS data plane.¶
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.¶
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.¶
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."¶
This Internet-Draft will expire on 20 July 2024.¶
Copyright (c) 2024 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License.¶
This document defines a YANG data model [RFC7950] that can be used to configure and manage OSPFv2 extensions for Segment Routing [RFC8665] and OSPFv3 extensions for Segment Routing [RFC8666] for the MPLS data plane. It is an augmentation to the OSPF YANG data model [RFC9129].¶
The YANG module in this document conforms to the Network Management Datastore Architecture (NMDA) [RFC8342].¶
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.¶
This document uses the graphical representation of data models defined in [RFC8340].¶
This document defines a model for OSPF Segment Routing Extensions for both OSPFv2 [RFC8665] and OSPFv3 [RFC8666]. It is an augmentation of the OSPF base model.¶
The OSPF SR YANG module requires support for the base segment routing module [RFC9020], which defines the global segment routing configuration independent of any specific routing protocol configuration, and support of OSPF base model [RFC9129] which defines basic OSPF configuration and state.¶
module: ietf-ospf-sr-mpls augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf: +--rw segment-routing | +--rw enabled? boolean | +--rw bindings {mapping-server}? | +--rw advertise | | +--rw policies* leafref | +--rw receive? boolean +--rw protocol-srgb {sr-mpls:protocol-srgb}? +--rw srgb* [lower-bound upper-bound] +--rw lower-bound uint32 +--rw upper-bound uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface: +--rw segment-routing +--rw adjacency-sid +--rw adj-sids* [value] | +--rw value-type? enumeration | +--rw value uint32 | +--rw protected? boolean | +--rw weight? uint8 | +--rw neighbor-id? inet:ip-address +--rw advertise-adj-group-sid* [group-id] | +--rw group-id uint32 +--rw advertise-protection? enumeration augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:fast-reroute/ospf:lfa: +--rw ti-lfa {ti-lfa}? +--rw enabled? boolean +--rw selection-tie-breakers +--rw node-protection! | +--rw priority? uint8 +--rw srlg-disjoint! +--rw priority? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:fast-reroute/ospf:lfa/ospf:remote-lfa: +--rw use-segment-routing-path? boolean {remote-lfa-sr}? augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:database/ospf:link-scope-lsa-type /ospf:link-scope-lsas/ospf:link-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque: +--ro extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro extended-prefix-range-flags | +--ro flags* identityref +--ro prefix? inet:ipv4-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro prefix-sid-flags | | +--ro flags* identityref | +--ro mt-id? uint8 | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque: +--ro extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro extended-prefix-range-flags | +--ro flags* identityref +--ro prefix? inet:ipv4-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro prefix-sid-flags | | +--ro flags* identityref | +--ro mt-id? uint8 | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv2 /ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque: +--ro extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro extended-prefix-range-flags | +--ro flags* identityref +--ro prefix? inet:ipv4-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro prefix-sid-flags | | +--ro flags* identityref | +--ro mt-id? uint8 | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:database/ospf:link-scope-lsa-type /ospf:link-scope-lsas/ospf:link-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque/ospf:extended-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro prefix-sid-flags | +--ro flags* identityref +--ro mt-id? uint8 +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque/ospf:extended-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro prefix-sid-flags | +--ro flags* identityref +--ro mt-id? uint8 +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv2 /ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-prefix-opaque/ospf:extended-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro prefix-sid-flags | +--ro flags* identityref +--ro mt-id? uint8 +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:extended-link-opaque/ospf:extended-link-tlv: +--ro adj-sid-sub-tlvs | +--ro adj-sid-sub-tlv* [] | +--ro adj-sid-flags | | +--ro flags* identityref | +--ro mt-id? uint8 | +--ro weight? uint8 | +--ro sid? uint32 +--ro lan-adj-sid-sub-tlvs +--ro lan-adj-sid-sub-tlv* [] +--ro lan-adj-sid-flags | +--ro flags* identityref +--ro mt-id? uint8 +--ro weight? uint8 +--ro neighbor-router-id? rt-types:router-id +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:database/ospf:link-scope-lsa-type /ospf:link-scope-lsas/ospf:link-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:ri-opaque: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv2/ospf:ospfv2/ospf:body/ospf:opaque /ospf:ri-opaque: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv2 /ospf:ospfv2/ospf:body/ospf:opaque/ospf:ri-opaque: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv3 /ospf:ospfv3/ospf:body/ospf:router-information: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospf:router-information: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:database/ospf:link-scope-lsa-type /ospf:link-scope-lsas/ospf:link-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospf:router-information: +--ro sr-algorithm-tlv | +--ro sr-algorithm* identityref +--ro sid-range-tlvs | +--ro sid-range-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro local-block-tlvs | +--ro local-block-tlv* [] | +--ro range-size? rt-types:uint24 | +--ro sid-sub-tlv | +--ro length? uint16 | +--ro sid? uint32 +--ro srms-preference-tlv +--ro preference? uint8 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-intra-area-prefix: +--ro ospfv3-extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro prefix? inet:ip-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro ospfv3-prefix-sid-flags | | +--ro flags* identityref | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-inter-area-prefix: +--ro ospfv3-extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro prefix? inet:ip-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro ospfv3-prefix-sid-flags | | +--ro flags* identityref | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv3 /ospf:ospfv3/ospf:body/ospfv3-e-lsa:e-as-external: +--ro ospfv3-extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro prefix? inet:ip-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro ospfv3-prefix-sid-flags | | +--ro flags* identityref | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-nssa: +--ro ospfv3-extended-prefix-range-tlvs +--ro extended-prefix-range-tlv* [] +--ro prefix-length? uint8 +--ro af? | iana-rt-types:address-family +--ro range-size? uint16 +--ro prefix? inet:ip-prefix +--ro prefix-sid-sub-tlvs | +--ro prefix-sid-sub-tlv* [] | +--ro ospfv3-prefix-sid-flags | | +--ro flags* identityref | +--ro algorithm? identityref | +--ro sid? uint32 +--ro unknown-tlvs +--ro unknown-tlv* [] +--ro type? uint16 +--ro length? uint16 +--ro value? yang:hex-string augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:interfaces/ospf:interface /ospf:database/ospf:link-scope-lsa-type /ospf:link-scope-lsas/ospf:link-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body/ospfv3-e-lsa:e-link /ospfv3-e-lsa:e-link-tlvs /ospfv3-e-lsa:intra-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro ospfv3-prefix-sid-flags | +--ro flags* identityref +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-intra-area-prefix /ospfv3-e-lsa:e-intra-prefix-tlvs /ospfv3-e-lsa:intra-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro ospfv3-prefix-sid-flags | +--ro flags* identityref +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-inter-area-prefix /ospfv3-e-lsa:e-inter-prefix-tlvs /ospfv3-e-lsa:inter-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro ospfv3-prefix-sid-flags | +--ro flags* identityref +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:database /ospf:as-scope-lsa-type/ospf:as-scope-lsas /ospf:as-scope-lsa/ospf:version/ospf:ospfv3 /ospf:ospfv3/ospf:body/ospfv3-e-lsa:e-as-external /ospfv3-e-lsa:e-external-tlvs /ospfv3-e-lsa:external-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro ospfv3-prefix-sid-flags | +--ro flags* identityref +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body/ospfv3-e-lsa:e-nssa /ospfv3-e-lsa:e-external-tlvs /ospfv3-e-lsa:external-prefix-tlv: +--ro prefix-sid-sub-tlvs +--ro prefix-sid-sub-tlv* [] +--ro ospfv3-prefix-sid-flags | +--ro flags* identityref +--ro algorithm? identityref +--ro sid? uint32 augment /rt:routing/rt:control-plane-protocols /rt:control-plane-protocol/ospf:ospf/ospf:areas /ospf:area/ospf:database/ospf:area-scope-lsa-type /ospf:area-scope-lsas/ospf:area-scope-lsa/ospf:version /ospf:ospfv3/ospf:ospfv3/ospf:body /ospfv3-e-lsa:e-router/ospfv3-e-lsa:e-router-tlvs /ospfv3-e-lsa:link-tlv: +--ro adj-sid-sub-tlvs | +--ro adj-sid-sub-tlv* [] | +--ro adj-sid-flags | | +--ro flags* identityref | +--ro weight? uint8 | +--ro sid? uint32 +--ro lan-adj-sid-sub-tlvs +--ro lan-adj-sid-sub-tlv* [] +--ro lan-adj-sid-flags | +--ro flags* identityref +--ro weight? uint8 +--ro neighbor-router-id? rt-types:router-id +--ro sid? uint32¶
[RFC2328], [RFC4750], [RFC4915], [RFC5340], [RFC5643], [RFC5838], [RFC6991], [RFC8102], [RFC8294], [RFC8343], [RFC8476], [RFC8349] and [I-D.ietf-rtgwg-segment-routing-ti-lfa] are referenced in the YANG data model.¶
The YANG module specified in this document define a schema for data that is designed to be accessed via network management protocols such as NETCONF [RFC6241] or RESTCONF [RFC8040]. The lowest NETCONF layer is the secure transport layer, and the mandatory-to-implement secure transport is Secure Shell (SSH) [RFC6242]. The lowest RESTCONF layer is HTTPS, and the mandatory-to-implement secure transport is TLS [RFC8446].¶
The NETCONF Configuration Access Control model (NACM) [RFC8341] provides the means to restrict access for particular NETCONF or RESTCONF users to a pre-configured subset of all available NETCONF or RESTCONF protocol operations and content.¶
There are a number of data nodes defined in the module that are writable/creatable/deletable (i.e., config true, which is the default). These data nodes may be considered sensitive or vulnerable in some network environments. Write operations (e.g., edit-config) to these data nodes without proper protection can have a negative effect on network operations. These are the subtrees and data nodes and their sensitivity/vulnerability:¶
Some of the readable data nodes in the module may be considered sensitive or vulnerable in some network environments. It is thus important to control read access (e.g., via get, get-config, or notification) to these data nodes.¶
The module ietf-ospf-sr-mpls augments base OSPF module data base with various TLVs. Knowledge of these data nodes can be used to attack other routers in the OSPF domain.¶
The authors wish to thank Yi Yang, Alexander Clemm, Gaurav Gupta, Ladislav Lhotka, Stephane Litkowski, Greg Hankins, Manish Gupta, Alan Davey, Divakaran Baskaran, and Tom Petch for their thorough reviews and helpful comments.¶
The authors wish to thank Julien Meuric for a very meticulous Routing Directorate review.¶
Author affiliation with The MITRE Corporation is provided for identification purposes only, and is not intended to convey or imply MITRE's concurrence with, or support for, the positions, opinions or viewpoints expressed. MITRE has approved this document for Public Release, Distribution Unlimited, with Public Release Case Number 18-3281.¶
This document registers a URI in the IETF XML registry [RFC3688]. Following the format in [RFC3688], the following registration is requested to be made:¶
URI: urn:ietf:params:xml:ns:yang:ietf-ospf-sr-mpls Registrant Contact: The IESG. XML: N/A, the requested URI is an XML namespace.¶
This document registers a YANG module in the YANG Module Names registry [RFC6020].¶
name: ietf-ospf-sr-mpls namespace: urn:ietf:params:xml:ns:yang:ietf-ospf-sr-mpls prefix: ospf-sr-mpls reference: RFC XXXX¶
The following is an XML example using the OSPF SR YANG module, and RFC 9020.¶
Note: '\' line wrapping per [RFC8792].¶
<?xml version='1.0' encoding='UTF-8'?> <routing xmlns="urn:ietf:params:xml:ns:yang:ietf-routing"> <router-id>1.1.1.1</router-id> <control-plane-protocols> <control-plane-protocol> <type xmlns:ospf="urn:ietf:params:xml:ns:yang:ietf-ospf">\ ospf:ospfv2</type> <name>OSPFv2</name> <ospf xmlns="urn:ietf:params:xml:ns:yang:ietf-ospf"> <areas> <area> <area-id>0.0.0.0</area-id> <interfaces> <interface> <name>eth0</name> <segment-routing xmlns="urn:ietf:params:xml:ns\ :yang:ietf-ospf-sr-mpls"> <adjacency-sid> <adj-sids> <value>3888</value> </adj-sids> </adjacency-sid> </segment-routing> </interface> </interfaces> </area> </areas> <segment-routing xmlns="urn:ietf:params:xml:ns:yang:\ ietf-ospf-sr-mpls"> <enabled>true</enabled> </segment-routing> <protocol-srgb xmlns="urn:ietf:params:xml:ns:yang:\ ietf-ospf-sr-mpls"> <srgb> <lower-bound>4000</lower-bound> <upper-bound>5000</upper-bound> </srgb> </protocol-srgb> </ospf> </control-plane-protocol> </control-plane-protocols> </routing>¶
The following is the same example using JSON format.¶
{ "routing": { "router-id": "1.1.1.1", "control-plane-protocols": { "control-plane-protocol": { "type": "ospf:ospfv2", "name": "OSPFv2", "ospf": { "areas": { "area": { "area-id": "0.0.0.0", "interfaces": { "interface": { "name": "eth0", "segment-routing": { "adjacency-sid": { "adj-sids": { "value": 3888 } } } } } } }, "segment-routing": { "enabled": true }, "protocol-srgb": { "srgb": { "lower-bound": 4000, "upper-bound": 5000 } } } } } } }¶
Dean Bogdanovic Alef EMail: ivandean@gmail.com Kiran Koushik Agrahara Sreenivasa Verizon Wireless Austin, TX 78681 USA EMail: KiranKoushik.AgraharaSreenivasa@verisonwireless.com¶