RE: RADEXT Issue 256 (NAS management Authorization)

["David B. Nelson" <d.b.nelson@comcast.net>]

One of the comments in Issue 256 was to add references for all of the
management protocols (methods?) enumerated for the
Framed-Management-Protocol Attribute in Section 8.1

In researching stable references, I discovered two issues:

(1) Some of these don't have good, stable references, such as standards
documents, but seem to be documented by UNIX "man pages".

(2) Some of these have supposedly been largely replaced in common usage.

The straw-man text that I now have looks like this:

   o  SNMP: Simple Network Management Protocol.  [RFC3411], [RFC3412],
      [RFC3413], [RFC3414], [RFC3415], [RFC3416], [RFC3417], [RFC3418]

   o  Web-based: Use of an embedded web server in the NAS for management
      via a generic web browser client.  The interface presented to the
      administrator may be graphical, tabular or textual.  The protocol
      is HTML over HTTP.  The protocol may optionally be HTML over
      HTTPS, i.e. using HTTP over TLS.

   o  NETCONF: Management via the NETCONF protocol using XML over
      supported transports (e.g.  SSH, BEEP, SOAP).  As secure transport
      profiles are defined for NETCONF, the list of transport options
      may expand.  [RFC4741], [RFC4742], [RFC4743], [RFC4744]

   o  FTP: File Transfer Protocol, used to transfer configuration files
      to and from the NAS.  [RFC0959]

   o  TFTP: Trivial File Transfer Protocol, used to transfer
      configuration files to and from the NAS.  [RFC1350]

   o  SFTP: SSH File Transfer Protocol, used to securely transfer
      configuration files to and from the NAS.  SFTP uses the services
      of SSH. (http://tools.ietf.org/html/draft-ietf-secsh-filexfer-13)

   o  RCP: Remote CoPy file copy utility (Unix-based), used to transfer
      configuration files to and from the NAS.  RCP has bee largely
      replaced by SFTP.

   o  SCP: Secure CoPy file copy utility (Unix-based), used to transfer
      configuration files to and from the NAS.  SCP has been largely
      replaced by SFTP.

IIRC, RCP and TFTP were added to a previous draft version to resolve
previous review comments.  It is reported (e.g. Wikipedia) that SFTP is now
preferred to both RCP and SCP.

I would like to get some feedback from the WG prior to submitting the -03
version, as to whether:

(1) Are all of these methods of copying configuration files to a NAS in
current use?

(2) Are the cited references (or lack thereof) sufficient to our needs?



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>