[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: draft-jones-opsec-01.txt comments: in-band management

At 04:56 PM 10/24/2003 -0400, George Jones wrote:
On Thu, 23 Oct 2003, Joel N. Weber II wrote:

> It seems like opsec is not really the right scope to be mandating
> lowest common denominator profiles for IPsec.  I think we ought to be
> able to just say ``IPsec'', and let the IPsec people take care of the
> rest.

Thank-you. Agreed.

The group is shutting down and it won't get done in the IPsec wg but miracles may still happen....I just figured if we were doing it for RS-232 then why not IPsec......(lets not waste bw debating this if I'm the only one on my side....I'm fine with not including it and have other ideas on how to maybe fix the vendor default issue)

Right.  If someone can show succes stories of quick, painless rollout
of IPsec in a large multi-vendor environemnt without the need to get
vendors and testing labs involved to resolve incompatabilites and
point a 5 page or less "Here's how I did it, and how you can do it to"
writeup" I'd be willing to be convinced.

I was looking more at creating a single default management IPsec profile so that vendors would look to the profile for creating a uniform default template and help avoid some pain for users in configuring IPsec. Less parameters to configure, less pain. Maybe? Is *anyone* on this list using IPsec to manage their routers/switches?

- merike