Re: safety of configuration

From: Kastenholz, Frank (FKastenholz@unispherenetworks.com)
Date: Thu Mar 07 2002 - 08:21:39 EST


One of the big problems in today's network is newbie-sites just plugging
their routers in and turning them on. The routers then come up in their
default condition, which may be detrimental to the health of some part,
or all, of the Internet. The intent of this requirement is to try and
eliminate that failure mode.

Yes, it's more of a box requirement - but are there things that the
architecture can do to either help solve the requirement or make it
easier for some other thing to solve it? Note that the text does
say "architecture, protocols, and standard implementation defaults".

And no, I do _not_ know how to solve it either -- but a criterion for
being a requirement is not "we know how to solve it" :-)

Frank Kastenholz

At 04:49 PM 3/5/02 +0100, avri wrote:
>from ngarch-req
>
>> 3.21 Safety of Configuration The architecture,
>> protocols, and standard implementation defaults must be
>> such that a router installed "out of the box" with no
>> configuration/etc by the operators will not cause "bad
>> things" to happen to the rest of the routing system (no
>> dialup customers advertising routes to 18/8!)
>
>there were folks in groupb that wanted this also, but i keep thinking this
is a box requirement. maybe i just don't understand what is meant by no
router out of the box causing problems. i can see the architecture limiting
damage to a locality, but i don't understand how it would be stopped
altogether.
>
>also this seems to fly against the previous requirement of no dependency on
no routing subsystems, as this seems to depend on configuration and
management at least to some extent.
>
>but as i say this requirement has me sort of confused.

==================================================
My preferrred signature is:
        This information is for the sole use of
        whoever receives it and may contain confusing,
        enlightening, enraging, entertaining,
        irritating, or just plain stupid information,
        including without limitation, double-secret-
        probation information belonging to [CENSORED
        BY THE NSA/FBI/MOUSE]. Any unauthorized review,
        use, disclosure, or distribution outside of an
        establishment serving alchohol is prohibited on
        days that do not end in Y.
But our ******'d lawyers would rather have:

=======================================
This email message is for the sole use of the intended recipient (s) and may
contain confidential and privileged information, including without
limitation, Confidential and/or Proprietary Information belonging to
Unisphere Networks, Inc. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply email and destroy all copies of the original
message.



This archive was generated by hypermail 2b29 : Mon Aug 04 2003 - 04:10:04 EDT