03/20/10Plug-and-Play Deployment of Network Devices Tina TSOU Juergen Schoenwaelder Yang Shi Problem Statement for Plug-and-Play Deployment of Network Devices draft-tsou-network-configuration-problem- statement-03 IETF 77, Anaheim, California, USA

03/20/10Plug-and-Play Deployment of Network Devices The Basic Problem New networks are being deployed with thousands of new devices Need to establish best practices for minimizing the cost of configuration Central Configuration System Other Operator's Network Home Network

03/20/10Plug-and-Play Deployment of Network Devices Stages of Installation Factory/warehouse pre-configuration Physical installation and testing Neighbour discovery Address configuration Connection to central configuration system Upload of local connectivity information Back-end adjustment of configuration scripts (as necessary) ● Note that this could involve manual intervention and take some time Download of configuration scripts Establishment of routing Verification

03/20/10Plug-and-Play Deployment of Network Devices Requirements for Interoperability Common neighbour discovery protocol, e.g., SEND (but what for IPv4?) Common address configuration protocol, e.g., DHCP Common protocol for securing connection between central configuration system and new network device, e.g., DTLS, SSL Common protocol for uploading local connectivity information, e.g., SNMP, NETCONF Common protocol for delivery of configuration scripts, e.g., TFTP

03/20/10Plug-and-Play Deployment of Network Devices Requirements for Security Mutual authentication and authorization of communications between neighbouring devices Mutual authentication and authorization of communications between new device and address server Mutual authentication and authorization of communications between new device and central configuration system Integrity protection for communications between new device and central configuration system

03/20/10Plug-and-Play Deployment of Network Devices Proposed BCP BCP to cover the following topics: Pre-configuration requirements Protocol support What else? BCP as OPSAWG work item?