RE: [dhcwg] RE: draft-bakke-dhc-snmp-trap-00.txt

[Randy Presuhn <rpresuhn@dorothy.bmc.com>]

Hi -

> Message-ID: <A451D5E6F15FD211BABC0008C7FAD7BC0EFFE01F@nl0006exch003u.nl.lucent.com>
> From: "Wijnen, Bert (Bert)" <bwijnen@lucent.com>
> To: Mark Bakke <mbakke@cisco.com>
> Cc: "'dhcwg@ietf.org'" <dhcwg@ietf.org>,
>         "snmpv3@lists. tislabs. com (E-mail)" <snmpv3@lists.tislabs.com>,
>         mibs@ops.ietf.org
> Subject: RE: [dhcwg] RE: draft-bakke-dhc-snmp-trap-00.txt
> Date: Tue, 24 Sep 2002 11:16:07 +0200
...
> > > First question would be: is it a generic problem that people face?
> > Yes.  There are increasingly more solutions that allow hosts,
> > racks of servers, embedded devices, etc. to be booted from
> > the network.  When this fails, the host's normal configuration
> > info (particularly the SNMP notification list) is not available,
> > so there's no good way to tell a management station about it.
> > 
> > I assume that most networks would want to use SNMP for this,
> > but syslog would work as well.
> > 
> 
> Mark's answer is just one answer that seem to support a YES answer
> Any others?
...

There has been some other work in the area of getting out
notifications of "pre-OS" systems, e.g.,
http://www.dmtf.org/standards/documents/ASF/DSP0114.pdf

However, this work does *not* address security, other than
to discourage implementors from providing protocol-level
security and to instead rely on "deployment schemes and
firewalls" (!).

Could information delivered via DHCP be used to accomplish a
"kick start" of the secrets, similar to that in RFC 2786?

 ------------------------------------------------------
 Randy Presuhn          BMC Software, Inc.  SJC-1.3141
 randy_presuhn@bmc.com  2141 North First Street
 Tel: +1 408 546-1006   San José, California 95131  USA
 ------------------------------------------------------
 My opinions and BMC's are independent variables.
 ------------------------------------------------------