IETF RTGWG Fangwei Hu Internet-Draft RongRong Hua Intended status: Standards Track ZTE Corporation Expires: September 20, 2018 Shujun Hu Rong Gu China Mobile Mar 19, 2018 YANG Data Model for Configuration Interface of Control-Plane and User- Plane separation BNG draft-hu-rtgwg-cu-separation-yang-model-03.txt Abstract This document defines the YANG data model for operation management of Control-Plane and User-Plane separation BNG (Broadband Network Gateway). Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on September 20, 2018. Copyright Notice Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of Fangwei Hu, et al. Expires September 20, 2018 [Page 1] Internet-Draft YANG for CU Separation BNG Mar 2018 the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 2. Conventions used in this document . . . . . . . . . . . . . . 4 2.1. Terminology . . . . . . . . . . . . . . . . . . . . . . . 4 2.2. Requirements Language . . . . . . . . . . . . . . . . . . 4 3. Design Tree . . . . . . . . . . . . . . . . . . . . . . . . . 4 3.1. Global Configuration . . . . . . . . . . . . . . . . . . 4 3.2. BNG-UP Interface Configuration . . . . . . . . . . . . . 5 3.3. Control Channel Configuration . . . . . . . . . . . . . . 5 3.4. Service Channel Configuration . . . . . . . . . . . . . . 6 3.5. Multicast Service . . . . . . . . . . . . . . . . . . . . 6 3.6. PPPOX Configuration . . . . . . . . . . . . . . . . . . . 7 3.7. Acl Configuration . . . . . . . . . . . . . . . . . . . . 8 3.8. QoS Configuration . . . . . . . . . . . . . . . . . . . . 9 4. vBNG YANG Data Model . . . . . . . . . . . . . . . . . . . . 9 5. Security Considerations . . . . . . . . . . . . . . . . . . . 29 6. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 30 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 30 8. References . . . . . . . . . . . . . . . . . . . . . . . . . 30 8.1. Normative References . . . . . . . . . . . . . . . . . . 30 8.2. Informative References . . . . . . . . . . . . . . . . . 31 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 32 1. Introduction The main idea of BNG Control-Plane and User-Plane separation is to extract and centralize the user management functions of multiple BNG devices, forming an unified and centralized control plane (CP), while the traditional router's Control Plane and forwarding plane are both preserved on BNG devices in the form of a user plane (UP).We name the control-Plane and User-plane separation BNG as vBNG. The architecture of Control-plane and user-plane separated BNG is shown as the following figure. Fangwei Hu, et al. Expires September 20, 2018 [Page 2] Internet-Draft YANG for CU Separation BNG Mar 2018 +----------------------------------+ | | | BNG-CP | | | +--+--------------+--------------+-+ | | | Service | Control | Management | Interface | Interface | Interface | | | | | | | VXLAN | OpenFlow | NETCONF | | | | +--+--------------+--------------+-+ | | | BNG-UP | | | +-----------------+----------------+ | | +--------+--------+ | | | Access Network | | | +--------+--------+ | +----+----+ | | | User | +---------+ Figure 1: Architecture of C/U separated BNG There are three interfaces between BNG-CP and BNG-UP: Service interface, control interface and management interface. The service interface is used to carry PPPoE/IPoE dialup packets between user plane and control plane. The requirement and possible solution is defined in the [I-D.huang-nvo3-vxlan-extension-for-vbras]. Control interface is used for setting forwarding entries of user plane through OpenFlow or other protocols. Management interface is used by BNG-CP to carry out related configurations of BNG-UP through NETCONF protocol [RFC6241]. This document defines the YANG data model for vBNG(BNG-CP and BNG- UP). There are three types of YANG data model for vBNG in this document: The YANG data models for BNG-CP, the YANG data models for BNG-UP by network management directly, and the YANG data models for BGN-UP through the management interfaces among the BNG-UP and BNG-CP. Fangwei Hu, et al. Expires September 20, 2018 [Page 3] Internet-Draft YANG for CU Separation BNG Mar 2018 The YANG data models through the management interfaces include: The BNG-UP interfaces configuration(Section 3.2), the controller channel configuration(Section 3.3), the ACL configuration for BNG- UP(Section 3.6) and QoS configuration for BNG-UP (section 3.7), etc. 2. Conventions used in this document 2.1. Terminology BNG: Broadband Network Gateway. A broadband remote access server routes traffic to and from broadband remote access devices such as digital subscriber line access multiplexers (DSLAM) on an Internet service provider's (ISP) network. BNG-CP: BNG Control Plane. The BNG-CP is a user control management component which support to manage UP's resources such as the user entry and forwarding policy. BNG-UP: BNG User Plane. BNG-UP is a network edge and user policy implementation component. vBNG: Virtualization Broadband Network Gateway. An vBNG is to extract and centralize the user management functions of multiple BNG devices, and to form an unified and centralized control plane (CP). The vBNG devices include BNG-UP and BNG-CP. 2.2. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. 3. Design Tree 3.1. Global Configuration The BNG-UP or BNG-CP part can be a physical or logical network element. The LNE model [I-D.ietf-rtgwg-lne-model] is augmented to define the YANG data models for BNG-UP and BNG-CP in this document. Fangwei Hu, et al. Expires September 20, 2018 [Page 4] Internet-Draft YANG for CU Separation BNG Mar 2018 module: ietf-vbng augment /lne:logical-network-elements/lne:logical-network-element: +--rw ietf-vbng +--rw bng-cp | +--rw bng-cp-name? string | +--rw enable? boolean +--rw bng-up! | +--rw bng-up* [shelf-no] | +--rw shelf-no uint8 | +--rw bng-up-name? string | +--rw netconf-server! | | +--rw ip inet:ipv4-address | | +--rw user-name? string | | +--rw password? string | | +--rw port? uint32 | +--rw keepalive-sink? enumeration 3.2. BNG-UP Interface Configuration The BNG-UP interface configuration is to configure the basic interface informations of BNG-UP element, such as interface name, the VLAN parameters for the sub-interface. The BNG-UP interface data models are configured through the management interfaces between BGN- UP and BNG-CP by netconf protocol. The tree structure for BNG-UP interface configuration is as following: +--rw interfaces | +--rw interface* [name] | +--rw name if:interface-ref | +--rw ethernet | | +--rw lacp? boolean | +--rw mac-offset? uint32 | +--rw vlans | +--rw tag* [index] | +--rw index uint8 | +--rw tag | +--rw tag-type? string | +--rw vlan-id? vlan-id 3.3. Control Channel Configuration The control channel is to configure the control channel parameters. The control channel data models are configured through the management interfaces between BGN-UP and BNG-CP by netconf protocol Fangwei Hu, et al. Expires September 20, 2018 [Page 5] Internet-Draft YANG for CU Separation BNG Mar 2018 The control channel parameters include: name, id, port, disconnect. The tree structure for control channel configuration parameters are as following: +--rw control-channel | +--rw address-family* [af] | | +--rw af address-family-type | | +--rw control-ip? inet:ip-address | +--rw name? string | +--rw id? uint32 | +--rw port? uint32 | +--rw disconnect | +--rw (response-delay)? | +--:(nolimitflag) | | +--rw forever? enumeration | +--:(range) | +--rw delay-time? uint32 3.4. Service Channel Configuration The VXLAN tunnel is the suggestion service interface protocol between BNG-CP and BNG-UP. The VXLAN tunnel parameters include: tunnel- source-ip,tunnel-destination-ip, vxlan-id, vxlan-tunnel-id, vxlan- tunnel-name,etc. +--rw vxlan-channel* [vxlan-tunnel-id] | +--rw vxlan-tunnel-id uint32 | +--rw vxlan-tunnel-name? string | +--rw address-family* [af] | +--rw af address-family-type | +--rw tunnel-source-ip? inet:ip-address | +--rw tunnel-destination-ip? inet:ip-address | +--rw bind-vxlan-id* [vxlan-id] | +--rw vxlan-id vxlan-id 3.5. Multicast Service The multicast service parameters are configured through management interfaces. Both IGMP and MLD multicast services are supported by bng. The multicast service YANG data model are only configured to BNG-CP. Fangwei Hu, et al. Expires September 20, 2018 [Page 6] Internet-Draft YANG for CU Separation BNG Mar 2018 +--rw multicast-service | +--rw multicast-global | | +--rw keepalive-timer? enumeration | | +--rw query-interval? uint16 | +--rw igmp-service-profile | | +--rw igmp-service-profile* [service-profile-num] | | +--rw service-profile-num uint8 | | +--rw access-group? string | | +--rw description? string | | +--rw max-groups? uint8 | | +--rw max-prw-groups? uint8 | | +--rw prw-group* [ipv4-address ipv4-address-mask] | | | +--rw ipv4-address inet:ipv4-address | | | +--rw ipv4-address-mask inet:ipv4-address | | | +--rw max-prw-count? uint32 | | | +--rw prw-resume-interval? uint32 | | +--rw static-group* [ipv4-address] | | +--rw ipv4-address inet:ipv4-address | +--rw mld-service-profile | +--rw mld-service-profile* [service-profile-num] | +--rw service-profile-num uint8 | +--rw access-group? string | +--rw description? string | +--rw max-groups? uint8 | +--rw max-prw-groups? uint8 | +--rw prw-group* [ipv6-address ipv6-prefixlen] | | +--rw ipv6-address inet:ipv6-address | | +--rw ipv6-prefixlen uint8 | | +--rw max-prw-count? uint32 | | +--rw prw-resume-interval? uint32 | +--rw static-group* [ipv6-address] | +--rw ipv6-address inet:ipv6-address 3.6. PPPOX Configuration The pppox parameters are only configured to BNG-CP. The parameters are as following: +--rw bras-pppox +--rw pppox-ipv6cp-cfg | +--rw ipv6cp-extension? enumeration | +--rw ipv6cp-aftr? uint8 | +--rw ipv6cp-ipv6-address? uint8 | +--rw ipv6cp-ipv6-prefix? uint8 | +--rw ipv6-dns! | | +--rw ipv6cp-ipv6-dns-secondary uint8 | | +--rw ipv6cp-ipv6-dns-primary uint8 Fangwei Hu, et al. Expires September 20, 2018 [Page 7] Internet-Draft YANG for CU Separation BNG Mar 2018 | +--rw ipv4-dns! | +--rw ipv6cp-ipv4-dns-primary uint8 | +--rw ipv6cp-ipv4-dns-secondary uint8 +--rw pppox-ipcp-cfg | +--rw ipcp-flag? enumeration | +--rw option-type? uint8 | +--rw br-address? inet:ipv4-address | +--rw ipv6-rapid-deployment! | +--rw v4-mask-len uint8 | +--rw v6-pref inet:ipv6-address | +--rw v6-mask-len uint8 +--rw pppoe-switch | +--rw delay-time? uint16 | +--rw keepalive-timer? enumeration | +--rw ppp-max-payload? enumeration | +--rw service? enumeration | +--rw ppp-mru-verify? enumeration | +--rw keepalive-fast-reply? enumeration +--rw pppoe-cfg* [template] +--rw template uint32 +--rw ppp-authentication? enumeration +--rw ppp-check-magic-num? enumeration +--rw ppp-mru? uint32 +--rw pppoe-ac-name? string +--rw pppoe-service-name-omit? enumeration +--rw pppoe-ac-cookie-check? enumeration +--rw pppoe-password-string? string +--rw pppoe-username-string? string +--rw (ppp-quick-redial)? | +--:(quick-redial-disable) | | +--rw ppp-quick-redial-disable? enumeration | +--:(fast-response) | +--rw ppp-fast-response? enumeration | +--rw ppp-quick-redial-enable? enumeration +--rw ppp-keepalive | +--rw ppp-keepalive-timer? uint32 | +--rw ppp-keepalive-count? uint16 +--rw ppp-timeout +--rw ppp-timeout-negtimeoutsec? uint8 +--rw ppp-timeout-authentication? uint8 3.7. Acl Configuration The acl information for BNG-UP is configured through netconf protocol from BNG-CP. The ACL information includes ipv4-acl,ipv6-acl,link- acl,etc. The YANG data model for ACL refers to [I-D.ietf-netmod-acl-model] Fangwei Hu, et al. Expires September 20, 2018 [Page 8] Internet-Draft YANG for CU Separation BNG Mar 2018 3.8. QoS Configuration The QoS information for BNG-UP is also configured through netconf protocol from BNG-CP. The support QoS information includes IP-DSCP, MPLS,VPLS, VPWS etc. The YANG data model for QoS refers to [I-D.asechoud-rtgwg-qos-model] 4. vBNG YANG Data Model file "ietf-vbng@2018-03-18.yang" module ietf-vbng{ namespace "urn:ietf:params:xml:ns:yang:ietf-vbng"; prefix "vbng"; import ietf-inet-types { prefix "inet"; } import ietf-interfaces { prefix if; } import ietf-logical-network-element { prefix lne; } organization "IETF NETCONF Working Group"; contact " WG List: Editor: Fangwei Hu "; description "The YANG module defines a generic configuration model for vbng"; revision 2018-03-20{ description "Change the control channel protocol name"; reference "draft-hu-rtgwg-cu-separation-yang-model-03"; } Fangwei Hu, et al. Expires September 20, 2018 [Page 9] Internet-Draft YANG for CU Separation BNG Mar 2018 revision 2018-02-27{ description "Correct some type of nodes."; reference "draft-hu-rtgwg-cu-separation-yang-model-02"; } revision 2018-01-18{ description "add multicast service configuration and pppox configuration, and update the OpenFlow channel parameters."; reference "draft-hu-rtgwg-cu-separation-yang-model-01"; } revision 2017-07-16{ description "Initial revision"; reference "draft-hu-rtgwg-cu-separation-yang-model-00"; } /* Typedefs */ typedef vlan-id { type uint16 { range "0..4094"; } description "Typedef for VLAN ID."; } typedef vxlan-id { type uint32; description "Typedef for VxLAN ID."; } typedef address-family-type { type enumeration { enum ipv4 { description "IPv4"; } enum ipv6 { description "IPv6"; } } description "Typedef for address family type."; Fangwei Hu, et al. Expires September 20, 2018 [Page 10] Internet-Draft YANG for CU Separation BNG Mar 2018 } /* Configuration Data */ augment /lne:logical-network-elements/lne:logical-network-element { container ietf-vbng{ container bng-cp { leaf bng-cp-name { type string; description "configure bng-cp name"; } leaf enable { type boolean; description "'true' to support bng control plane and user plane separation"; } description "configure bng-cp"; } container bng-up { presence bng-up; list bng-up { key shelf-no ; leaf shelf-no { type uint8 { range 1..127 ; } description 'Configure shelf-no of forwarder,1-127.'; } leaf bng-up-name { type string { length 1..31 ; } description 'Configure bng up name.' ; } container netconf-server { presence netconf-server ; leaf ip { type inet:ipv4-address; mandatory true ; description 'Configure ip address of netconf server.'; } leaf user-name { Fangwei Hu, et al. Expires September 20, 2018 [Page 11] Internet-Draft YANG for CU Separation BNG Mar 2018 type string { length 1..65 ; } description 'configure user name, default: "who".'; } leaf password { type string { length 3..32 ; } description 'configure password, default: "who".'; } leaf port { type uint32; description 'Configure port.'; } description 'Configure netconf server.'; } leaf keepalive-sink { type enumeration { enum enable { value 1 ; description 'enable the keepalive-sink function'; } enum disable { value 0 ; description 'disable keepalive-sink function'; } } description "configure keepalive-sink"; } description "configure bng up list"; } description "configure bng up container"; } container interfaces { list interface { key name; leaf name { type if:interface-ref; description "interface name"; } container ethernet { leaf lacp { type boolean; Fangwei Hu, et al. Expires September 20, 2018 [Page 12] Internet-Draft YANG for CU Separation BNG Mar 2018 description "enable lacp function"; } description "configure ethernet interface"; } leaf mac-offset { type uint32; description "configure mac offset"; } container vlans { list tag { key index; max-elements 2; leaf index { type uint8 { range "0..1"; } must ". = 0 or count(../../tag[index = 0]/index) > 0" { error-message "An inner tag can only be specified if an outer tag has also been specified"; description "Ensure that an inner tag cannot be specified without an outer tag'"; } description "The index into the tag stack, outermost tag assigned index 0"; } container tag{ leaf tag-type { type string; description "tag type"; } leaf vlan-id { type vlan-id; description "vlan id value"; } description "tag"; } description "tag list"; } description "vlans"; } description "interfaces list"; } description "interface container"; Fangwei Hu, et al. Expires September 20, 2018 [Page 13] Internet-Draft YANG for CU Separation BNG Mar 2018 } container control-channel { list address-family { key "af"; leaf af { type address-family-type; description "Address family type value."; } leaf control-ip { type inet:ip-address; description "Set the IP address of for control channel protocol session"; } description "Per-af params."; } leaf name { type string; description "control channel protocol logical name"; } leaf id { type uint32; description "id value"; } leaf of-port { type uint32; description "control channel udp port number"; } container disconnect { choice response-delay { default range ; case nolimitflag { leaf forever { type enumeration { enum forever { value 1 ; description "Delay forever"; } } description 'Delay forever'; } description 'The flag of no time limite'; } case range { Fangwei Hu, et al. Expires September 20, 2018 [Page 14] Internet-Draft YANG for CU Separation BNG Mar 2018 leaf delay-time { type uint32 { range 0..2880 ; } description 'Delay time ,default 240 minutes'; } description 'Set delay time range'; } description 'Set delay time'; } description 'Set delay time after control channel protocol disconnect'; } description "configure control channel value"; } list vxlan-channel{ key vxlan-tunnel-id; leaf vxlan-tunnel-id { type uint32; description "Static VxLAN tunnel ID."; } leaf vxlan-tunnel-name { type string; description "Name of the static VxLAN tunnel."; } list address-family { key "af"; leaf af { type address-family-type; description "Address family type value."; } leaf tunnel-source-ip { type inet:ip-address; description "Source IP address for the static VxLAN tunnel"; } leaf tunnel-destination-ip { type inet:ip-address; description "Destination IP address for the static VxLAN tunnel"; } Fangwei Hu, et al. Expires September 20, 2018 [Page 15] Internet-Draft YANG for CU Separation BNG Mar 2018 list bind-vxlan-id { key vxlan-id; leaf vxlan-id { type vxlan-id; description "VxLAN ID."; } description "VxLAN ID list for the VTEP."; } description "Per-af params."; } description "Configure VxLAN channel"; } container multicast-service{ container multicast-global { leaf keepalive-timer { type enumeration { enum start { value 1 ; description 'open switch'; } enum stop { value 2 ; description 'close switch'; } enum always { value 3 ; description 'always keepalive'; } } default start ; description 'the switch of sending keepalive packet'; } leaf query-interval { type uint16 { range 1..65535 ; } default 125 ; description 'multicast query interval'; } description 'multicast global configuration'; } Fangwei Hu, et al. Expires September 20, 2018 [Page 16] Internet-Draft YANG for CU Separation BNG Mar 2018 container igmp-service-profile { list igmp-service-profile { key service-profile-num ; leaf service-profile-num { type uint8 { range 1..100 ; } description 'service profile number'; } leaf access-group { type string { length 1..31 ; } description 'acl name'; } leaf description { type string { length 1..31 ; } description 'description of service profile'; } leaf max-groups { type uint8 { range 1..128 ; } default 10 ; description 'max groups of the service profile'; } leaf max-prw-groups { type uint8 { range 1..128 ; } default 10 ; description 'max preview groups of the service profile'; } list prw-group { key 'ipv4-address ipv4-address-mask'; leaf ipv4-address { type inet:ipv4-address ; description 'ipv4 address of the preview group'; } leaf ipv4-address-mask { type inet:ipv4-address; Fangwei Hu, et al. Expires September 20, 2018 [Page 17] Internet-Draft YANG for CU Separation BNG Mar 2018 description 'ipv4 mask of the preview group'; } leaf max-prw-count { type uint32 { range 1..1800 ; } default 10 ; description 'max preview times'; } leaf prw-resume-interval { type uint32 { range 1..86400 ; } default 60 ; description 'preview interval'; } description 'configure preview group'; } list static-group { key ipv4-address ; leaf ipv4-address { type inet:ipv4-address ; description 'ipv4 address of the static group'; } description 'configure static group'; } description 'configuration of igmp service profile'; } description 'configuration of igmp service profile'; } container mld-service-profile { list mld-service-profile { key service-profile-num ; leaf service-profile-num { type uint8 { range 1..100 ; } description 'service profile number'; } leaf access-group { type string { length 1..31 ; } description 'acl name'; Fangwei Hu, et al. Expires September 20, 2018 [Page 18] Internet-Draft YANG for CU Separation BNG Mar 2018 } leaf description { type string { length 1..31 ; } description 'description of service profile'; } leaf max-groups { type uint8 { range 1..128 ; } default 10 ; description 'max groups of the service profile'; } leaf max-prw-groups { type uint8 { range 1..128 ; } default 10 ; description 'max preview groups of the service profile'; } list prw-group { key 'ipv6-address ipv6-prefixlen' ; leaf ipv6-address { type inet:ipv6-address ; description 'ipv6 address of the preview group'; } leaf ipv6-prefixlen { type uint8 { range 1..128 ; } description 'ipv6 prefix length'; } leaf max-prw-count { type uint32 { range 1..1800 ; } default 10 ; description 'max preview times'; } leaf prw-resume-interval { type uint32 { range 1..86400 ; } default 60 ; Fangwei Hu, et al. Expires September 20, 2018 [Page 19] Internet-Draft YANG for CU Separation BNG Mar 2018 description 'preview interval'; } description 'configure preview group'; } list static-group { key ipv6-address ; leaf ipv6-address { type inet:ipv6-address; description 'ipv6 address of the static group'; } description 'configure static group'; } description 'configuration of mld service profile'; } description 'configuration of mld service profile'; } description 'multicast service configuration'; } container bras-pppox { container pppox-ipv6cp-cfg { leaf ipv6cp-extension { type enumeration { enum enable { value 1 ; description "enable the IPv6cp extension!"; } enum disable { value 0 ; description "disable the IPv6cp extension!"; } } default disable ; description 'Ipv6cp extension flag'; } leaf ipv6cp-aftr { type uint8 { range 1..255 ; } description 'AFTR option type value'; } leaf ipv6cp-ipv6-address { type uint8 { range 1..255 ; } Fangwei Hu, et al. Expires September 20, 2018 [Page 20] Internet-Draft YANG for CU Separation BNG Mar 2018 description 'Ipv6 address option type value'; } leaf ipv6cp-ipv6-prefix { type uint8 { range 1..255 ; } description 'Ipv6 prefix option type value'; } container ipv6-dns { presence ipv6-dns ; leaf ipv6cp-ipv6-dns-secondary { type uint8 { range 1..255 ; } mandatory true ; description 'IPV6 primary DNS option type value'; } leaf ipv6cp-ipv6-dns-primary { type uint8 { range 1..255 ; } mandatory true ; description 'IPV6 secondary DNS option type value'; } description 'Ipv6 DNS option type value'; } container ipv4-dns { presence ipv4-dns ; leaf ipv6cp-ipv4-dns-primary { type uint8 { range 1..255 ; } mandatory true ; description 'IPV4 primary DNS option type value'; } leaf ipv6cp-ipv4-dns-secondary { type uint8 { range 1..255 ; } mandatory true ; description 'IPV4 secondary DNS option type value'; } description 'Ipv4 DNS option type value'; } description 'Configuration about IPV6CP extension.'; } Fangwei Hu, et al. Expires September 20, 2018 [Page 21] Internet-Draft YANG for CU Separation BNG Mar 2018 container pppox-ipcp-cfg { leaf ipcp-flag { type enumeration { enum enable { value 1 ; description "enable ipcp extension flag"; } enum disable { value 0 ; description "disable ipcp extension flag"; } } default disable ; description 'Ipcp extension flag'; } leaf option-type { type uint8 { range 1..255 ; } description 'Ipcp 6rd option type'; } leaf br-address { type inet:ipv4-address { pattern '^((1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]{' + '0,1})\.){3}(0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|' + '[3-9][0-9]{0,1})$|^0\.((1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9' + ']|25[0-5]|[3-9][0-9]{0,1})\.){2}(1[0-9]{0,2}|2[0-9]{0,1}|2' + '[0-4][0-9]|25[0-5]|[3-9][0-9]{0,1})$|^((1[0-9]{0,2}|2[0-9]' + '{0,1}|2[0-4][0-9]|25[0-5]|[3-9][0-9]{0,1})\.)0\.((1[0-9]{0' + ',2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-5]|[3-9][0-9]{0,1})\.)(1[' + '0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-5]|[3-9][0-9]{0,1})' + '$|^((1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-5]|[3-9][0-9' + ']{0,1})\.){2}0\.(1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-' + '5]|[3-9][0-9]{0,1})$|^((1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9' + ']|25[0-5]|[3-9][0-9]{0,1})\.){3}0$|255\.((0|1[0-9]{0,2}|2[' + '0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]{0,1})\.){2}(0|1[0' + '-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]{0,1})$' + '|^((0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-' + '9]{0,1})\.)255\.((0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25' + '[0-4]|[3-9][0-9]{0,1})\.)(0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4]' + '[0-9]|25[0-4]|[3-9][0-9]{0,1})$|^((0|1[0-9]{0,2}|2[0-9]{0,' + '1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]{0,1})\.){2}255\.(0|1[0-9' + ']{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]{0,1})$|^' + '((0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-4]|[3-9][0-9]' + '{0,1})\.){3}255$' ; Fangwei Hu, et al. Expires September 20, 2018 [Page 22] Internet-Draft YANG for CU Separation BNG Mar 2018 } description '6RD BR IPv4 address'; } container ipv6-rapid-deployment { presence ipv6-rapid-deployment ; leaf v4-mask-len { type uint8 { range 0..32 ; } mandatory true ; description 'IPv4 address mask length'; } leaf v6-pref { type inet:ipv6-address ; mandatory true ; description 'IPv6 prefix'; } leaf v6-mask-len { type uint8 { range 1..128 ; } mandatory true ; description 'IPv6 prefix length'; } description 'Ipv6 rapid deployment'; } description 'Configuration about IPCP extension.'; } container pppoe-switch { leaf delay-time { type uint16 { range 1..300 ; } description 'Trigger user offline when VCC phys-interface down'; } leaf keepalive-timer { type enumeration { enum start { value 1 ; description "start keepalive timer"; } enum stop { value 0 ; description "stop keepalive timer"; } } default start ; description 'Start or stop send keepalive packet'; Fangwei Hu, et al. Expires September 20, 2018 [Page 23] Internet-Draft YANG for CU Separation BNG Mar 2018 } leaf ppp-max-payload { type enumeration { enum disable { value 0 ; description "disable ppp max payload"; } enum enable { value 1 ; description "enable ppp max payload"; } } default disable ; description 'Enable or disable pppoe ppp-max-payload'; } leaf service { type enumeration { enum advertise{ value 1 ; description "enable ppp service!"; } enum disable { value 0 ; description "disable ppp service!"; } } default advertise ; description 'Open or close pppoe service'; } leaf ppp-mru-verify { type enumeration { enum open { value 1 ; description "enable ppp mru verify!"; } enum close { value 0 ; description "disable ppp mru!"; } } default close ; description 'set ppp lcp mru verify when mru over 1492'; } leaf keepalive-fast-reply { type enumeration { enum enable { value 1 ; Fangwei Hu, et al. Expires September 20, 2018 [Page 24] Internet-Draft YANG for CU Separation BNG Mar 2018 description 'Enable keepalive fast reply!'; } enum disable { value 0 ; description 'Disable keepalive fast reply!'; } } description 'Set keepalive fast reply flag.'; } description 'Configuration about pppoe switch.'; } list pppoe-cfg { key template ; leaf template { type uint32 { range 1..1000 ; } description 'PPPoX template number'; } leaf ppp-authentication { type enumeration { enum pap { value 1 ; description "configure pap authentication!"; } enum chap { value 2 ; description "configure chap authentication!"; } enum mschapv1 { value 6 ; description "configure mschapv1 authentication!"; } enum mschapv2 { value 7 ; description "configure mschapv2 authentication!"; } enum pap-chap { value 21 ; description "configure pap-chap authentication!"; } } default pap-chap ; description 'Set ppp authentication'; } leaf ppp-check-magic-num { type enumeration { enum disable { Fangwei Hu, et al. Expires September 20, 2018 [Page 25] Internet-Draft YANG for CU Separation BNG Mar 2018 value 0 ; description 'disable ppp magic check'; } enum enable { value 1 ; description 'enable ppp magic check'; } } default enable ; description 'Check magic number or not'; } leaf ppp-mru { type uint32 { range 320..9000 ; } default 1492 ; description 'Set mru value'; } leaf pppoe-ac-name { type string ; description 'Set ac-name'; } leaf pppoe-service-name-omit { type enumeration { enum disable { value 0 ; description "disable pppoe service name omit"; } enum enable { value 1 ; description "enable pppoe service name omit"; } } default disable ; description 'Check service-name value'; } leaf pppoe-ac-cookie-check { type enumeration { enum disable { value 0 ; description "disable pppoe ac cookie check"; } enum enable { value 1 ; description "enable pppoe ac cookie check"; } } Fangwei Hu, et al. Expires September 20, 2018 [Page 26] Internet-Draft YANG for CU Separation BNG Mar 2018 default enable ; description 'Check options'; } leaf pppoe-password-string { type string ; description 'Set authen fail password error string'; } leaf pppoe-username-string { type string ; description 'Set authen fail username error string'; } choice ppp-quick-redial { case quick-redial-disable { leaf ppp-quick-redial-disable { type enumeration { enum disable { value 0 ; description "disable ppp quick redial"; } } default disable ; description 'disable quick-redial'; } description 'disable quick-redial'; } case fast-response { leaf ppp-fast-response { type enumeration { enum diable { value 0 ; description "disable ppp fast response"; } enum enable { value 1 ; description "enable ppp fast response"; } } description 'set Response the access request immediately'; } leaf ppp-quick-redial-enable { type enumeration { enum enable { value 1 ; description "enable ppp quick redial"; } } default enable ; Fangwei Hu, et al. Expires September 20, 2018 [Page 27] Internet-Draft YANG for CU Separation BNG Mar 2018 description 'Enable quick-redial'; } description 'set quick-redial or Response the access request immediately'; } default quick-redial-disable ; description 'Enable or disable quick-redial'; } container ppp-keepalive { leaf ppp-keepalive-timer { type uint32 { range 10..14400 ; } default 60 ; description 'Set keepalive time(unit:seconds)'; } leaf ppp-keepalive-count { type uint16 { range 1..10 ; } default 3 ; description 'Set keepalive counter'; } description 'Set keepalive time and counter'; } container ppp-timeout { leaf ppp-timeout-negtimeoutsec { type uint8 { range 1..10 ; } default 3 ; description 'Set ppp negtimeoutsec timeout(unit:seconds)'; } leaf ppp-timeout-authentication { type uint8 { range 1..10 ; } default 3 ; description 'Set ppp authentication timeout(unit:seconds)'; } description 'Set ppp negtimeoutsec and authentication timeout'; } description 'Configuration pppoe template'; } description 'Configuration vBRAS PPPoX.'; } description "ietf-bng configuration!"; } description "augment lne model"; Fangwei Hu, et al. Expires September 20, 2018 [Page 28] Internet-Draft YANG for CU Separation BNG Mar 2018 } } 5. Security Considerations The YANG module specified in this document defines a schema for data that is designed to be accessed via network management protocols such as NETCONF [RFC6241] or RESTCONF [RFC8040]. The lowest NETCONF layer is the secure transport layer, and the mandatory-to-implement secure transport is Secure Shell (SSH)[RFC6242]. The lowest RESTCONF layer is HTTPS, and the mandatory-to-implement secure transport is TLS [RFC5246]. The NETCONF access control model [RFC6536] provides the means to restrict access for particular NETCONF or RESTCONF users to a preconfigured subset of all available NETCONF or RESTCONF protocol operations and content. vBNG represents device and network configuration information based on the LNE. As such, the security of this information is important, but it is fundamentally no different than any other interface or device configuration information that has already been covered in other documents such as [I-D.ietf-rtgwg-lne-model]. The vulnerable "config true" parameters and subtree are the following: /lne:logical-network-elements/lne:logical-network-element/ietf-vbng/ bng-cp: this subtree specifies the global configuration of bng control plane. Modify the configuration can cause the bng control plane instance disabled. /lne:logical-network-elements/lne:logical-network-element/ietf-vbng/ bng-up: this subtree specifies the global configuration of BNG user plane. Modify the configuration can cause the BNG user plane instance disabled. /lne:logical-network-elements/lne:logical-network-element/ietf-vbng/ control-channel: this subtree specifies the configuration control channel parameters among bng user planes and control plane. Modify the configuration can cause the control channel and control channel protocol interrupted. /lne:logical-network-elements/lne:logical-network-element/ietf-vbng/ vxlan-channel: this subtree specifies the configuration VXLAN channel parameters among BNG user planes and control plane. Modify the configuration can cause the VXLAN channel interrupted. Fangwei Hu, et al. Expires September 20, 2018 [Page 29] Internet-Draft YANG for CU Separation BNG Mar 2018 Unauthorized access to any of these lists can adversely affect the security of both the local device and the network. This may lead to network malfunctions, delivery of packets to inappropriate destinations, and other problems. 6. Acknowledgements 7. IANA Considerations This document registers a URI in the IETF XML registry [RFC3688]. Following the format in [RFC3688], the following registration is requested to be made. URI: urn:ietf:params:xml:ns:yang:ietf-vbng. Registrant Contact: The IESG. XML: N/A, the requested URI is an XML namespace. This document registers a YANG module in the YANG Module Names registry [RFC6020]. name: ietf-vbng namespace: urn:ietf:params:xml:ns:yang:ietf-vbng prefix: vbng reference: RFC XXXX 8. References 8.1. Normative References [I-D.asechoud-rtgwg-qos-model] Choudhary, A., Jethanandani, M., Strahle, N., Aries, E., and I. Chen, "YANG Model for QoS", draft-asechoud-rtgwg- qos-model-05 (work in progress), March 2018. [I-D.ietf-netmod-acl-model] Jethanandani, M., Huang, L., Agarwal, S., and D. Blair, "Network Access Control List (ACL) YANG Data Model", draft-ietf-netmod-acl-model-18 (work in progress), March 2018. [I-D.ietf-rtgwg-lne-model] Berger, L., Hopps, C., Lindem, A., Bogdanovic, D., and X. Liu, "YANG Model for Logical Network Elements", draft- ietf-rtgwg-lne-model-09 (work in progress), March 2018. Fangwei Hu, et al. Expires September 20, 2018 [Page 30] Internet-Draft YANG for CU Separation BNG Mar 2018 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC3688] Mealling, M., "The IETF XML Registry", BCP 81, RFC 3688, DOI 10.17487/RFC3688, January 2004, . [RFC5246] Dierks, T. and E. Rescorla, "The Transport Layer Security (TLS) Protocol Version 1.2", RFC 5246, DOI 10.17487/RFC5246, August 2008, . [RFC6020] Bjorklund, M., Ed., "YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)", RFC 6020, DOI 10.17487/RFC6020, October 2010, . [RFC6241] Enns, R., Ed., Bjorklund, M., Ed., Schoenwaelder, J., Ed., and A. Bierman, Ed., "Network Configuration Protocol (NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011, . [RFC6242] Wasserman, M., "Using the NETCONF Protocol over Secure Shell (SSH)", RFC 6242, DOI 10.17487/RFC6242, June 2011, . [RFC6536] Bierman, A. and M. Bjorklund, "Network Configuration Protocol (NETCONF) Access Control Model", RFC 6536, DOI 10.17487/RFC6536, March 2012, . [RFC8040] Bierman, A., Bjorklund, M., and K. Watsen, "RESTCONF Protocol", RFC 8040, DOI 10.17487/RFC8040, January 2017, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . 8.2. Informative References [I-D.huang-nvo3-vxlan-extension-for-vbras] Huang, L. and S. Hu, "VxLAN Extension Requirement for Signaling Exchange Between Control and User Plane of vBras", draft-huang-nvo3-vxlan-extension-for-vbras-00 (work in progress), March 2017. Fangwei Hu, et al. Expires September 20, 2018 [Page 31] Internet-Draft YANG for CU Separation BNG Mar 2018 Authors' Addresses Fangwei Hu ZTE Corporation No.889 Bibo Rd Shanghai 201203 China Phone: +86 21 68896273 Email: hu.fangwei@zte.com.cn RongRong Hua ZTE Corporation No.50 Software Avenue,Yuhuatai District Nanjing, Jiangsu Province 210012 China Email: hua.rongrong@zte.com.cn Shujun Hu China Mobile 32 Xuanwumen West Ave, Xicheng District Beijing 100053 China Email: shujun_hu@outlook.com Rong Gu China Mobile 32 Xuanwumen West Ave, Xicheng District Beijing, Beijing 100053 China Email: gurong_cmcc@outlook.com Fangwei Hu, et al. Expires September 20, 2018 [Page 32]