rfc8921v2.txt   rfc8921.txt 
skipping to change at line 1352 skipping to change at line 1352
9.1.9. SERVICE_DESCRIPTION 9.1.9. SERVICE_DESCRIPTION
This document defines a machinery to negotiate any aspect subject to This document defines a machinery to negotiate any aspect subject to
negotiation. Service clauses that are under negotiation are conveyed negotiation. Service clauses that are under negotiation are conveyed
using this attribute. using this attribute.
The structure of the connectivity provisioning clauses is provided in The structure of the connectivity provisioning clauses is provided in
the following subsection. the following subsection.
9.1.9.1. CONNECTIVITY_PROVISIONING_DOCUMENT 9.1.9.1. CPD
The RBNF format of the CPD is shown in Figure 10. The RBNF format of the CPD is shown in Figure 10.
<CONNECTIVITY_PROVISIONING_DOCUMENT> ::= <CPD> ::= <Connectivity Provisioning Component> ...
<Connectivity Provisioning Component> ...
<Connectivity Provisioning Component> ::= <Connectivity Provisioning Component> ::=
<CONNECTIVITY_PROVISIONING_PROFILE> ... <CONNECTIVITY_PROVISIONING_PROFILE> ...
<CONNECTIVITY_PROVISIONING_PROFILE> ::= <CONNECTIVITY_PROVISIONING_PROFILE> ::=
<Customer Nodes Map> <Customer Nodes Map>
<SCOPE> <SCOPE>
<QoS Guarantees> <QoS Guarantees>
<Availability> <Availability>
<CAPACITY> <CAPACITY>
<Traffic Isolation> <Traffic Isolation>
<Conformance Traffic> <Conformance Traffic>
skipping to change at line 1487 skipping to change at line 1486
9.2.1. QUOTATION 9.2.1. QUOTATION
The format of the QUOTATION message is shown below: The format of the QUOTATION message is shown below:
<QUOTATION Message> ::= <VERSION> <QUOTATION Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
[<EXPECTED_RESPONSE_TIME>] [<EXPECTED_RESPONSE_TIME>]
<REQUESTED_CONNECTIVITY_PROVISIONING_DOCUMENT> <REQUESTED_CPD>
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
A QUOTATION message must include an order identifier that is A QUOTATION message must include an order identifier that is
generated by the client (CUSTOMER_ORDER_IDENTIFIER). Because several generated by the client (CUSTOMER_ORDER_IDENTIFIER). Because several
orders can be issued to several servers, the QUOTATION message must orders can be issued to several servers, the QUOTATION message must
also include a Transaction-ID. also include a Transaction-ID.
The message may include an EXPECTED_RESPONSE_TIME, which indicates by The message may include an EXPECTED_RESPONSE_TIME, which indicates by
when the client expects to receive an offer from the server. The when the client expects to receive an offer from the server. The
QUOTATION message must also include a requested service description QUOTATION message must also include a requested service description
skipping to change at line 1599 skipping to change at line 1598
The format of the OFFER message is shown below: The format of the OFFER message is shown below:
<OFFER Message> ::= <VERSION> <OFFER Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
<PROVIDER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER>
<NONCE> <NONCE>
<VALIDITY_OFFER_TIME> <VALIDITY_OFFER_TIME>
<OFFERED_CONNECTIVITY_PROVISIONING_DOCUMENT> <OFFERED_CPD>
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
The server answers a QUOTATION request received from the client with The server answers a QUOTATION request received from the client with
an OFFER message. The offer will be considered to be rejected by the an OFFER message. The offer will be considered to be rejected by the
client if no confirmation (i.e., an ACCEPT message sent by the client if no confirmation (i.e., an ACCEPT message sent by the
client) is received by the server before the expiration of the client) is received by the server before the expiration of the
validity time. validity time.
The server may include ACTIVATION_TYPE to indicate whether the offer The server may include ACTIVATION_TYPE to indicate whether the offer
is about a permanent or scheduled activation type. The message may is about a permanent or scheduled activation type. The message may
skipping to change at line 1627 skipping to change at line 1626
The format of the ACCEPT message is shown below: The format of the ACCEPT message is shown below:
<ACCEPT Message> ::= <VERSION> <ACCEPT Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
<PROVIDER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER>
<NONCE> <NONCE>
<ACCEPTED_CONNECTIVITY_PROVISIONING_DOCUMENT> <ACCEPTED_CPD>
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
This message is used by a client to confirm the acceptance of an This message is used by a client to confirm the acceptance of an
offer received from a server. The fields of this message must be offer received from a server. The fields of this message must be
copied from the received OFFER message. This message should not be copied from the received OFFER message. This message should not be
sent after the validity time of the offer expires, as indicated by sent after the validity time of the offer expires, as indicated by
the server (Section 9.2.3). the server (Section 9.2.3).
9.2.5. DECLINE 9.2.5. DECLINE
skipping to change at line 1703 skipping to change at line 1702
The format of the ACK message is shown below: The format of the ACK message is shown below:
<ACK Message> ::= <VERSION> <ACK Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
<PROVIDER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER>
[<EXPECTED_RESPONSE_TIME>] [<EXPECTED_RESPONSE_TIME>]
[<CONNECTIVITY_PROVISIONING_DOCUMENT>] [<CPD>]
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
This message is issued by the server to close a CPNP transaction or This message is issued by the server to close a CPNP transaction or
by a client to grant more negotiation time to the server. by a client to grant more negotiation time to the server.
This message is sent by the server as a response to an ACCEPT, This message is sent by the server as a response to an ACCEPT,
WITHDRAW, DECLINE, or CANCEL message. In this case, the ACK message WITHDRAW, DECLINE, or CANCEL message. In this case, the ACK message
must include the copy of the service description (i.e., CPD for must include the copy of the service description (i.e., CPD for
connectivity services) as stored by the server. In particular, the connectivity services) as stored by the server. In particular, the
following considerations are taken into account for connectivity following considerations are taken into account for connectivity
skipping to change at line 1743 skipping to change at line 1742
9.2.7. CANCEL 9.2.7. CANCEL
The format of the CANCEL message is shown below: The format of the CANCEL message is shown below:
<CANCEL Message> ::= <VERSION> <CANCEL Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
[<CONNECTIVITY_PROVISIONING_DOCUMENT>] [<CPD>]
The client can issue a CANCEL message at any stage during the CPNP The client can issue a CANCEL message at any stage during the CPNP
negotiation process before an agreement is reached. The negotiation process before an agreement is reached. The
CUSTOMER_ORDER_IDENTIFIER and TRANSACTION_ID are used by the server CUSTOMER_ORDER_IDENTIFIER and TRANSACTION_ID are used by the server
as keys to find the corresponding order. If a quotation order as keys to find the corresponding order. If a quotation order
matches, the server changes the state of this quotation order to matches, the server changes the state of this quotation order to
"Cancelled" and then returns an ACK with a copy of the Requested CPD "Cancelled" and then returns an ACK with a copy of the Requested CPD
to the requesting client. to the requesting client.
If no quotation order is found, the server returns a FAIL message to If no quotation order is found, the server returns a FAIL message to
skipping to change at line 1767 skipping to change at line 1766
The format of the WITHDRAW message is shown below: The format of the WITHDRAW message is shown below:
<WITHDRAW Message> ::= <VERSION> <WITHDRAW Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
<PROVIDER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER>
<NONCE> <NONCE>
[<ACCEPTED_CONNECTIVITY_PROVISIONING_DOCUMENT>] [<ACCEPTED_CPD>]
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
This message is used to withdraw an offer already accepted by the This message is used to withdraw an offer already accepted by the
Customer. Figure 14 shows a typical usage of this message. Customer. Figure 14 shows a typical usage of this message.
+------+ +------+ +------+ +------+
|Client| |Server| |Client| |Server|
+------+ +------+ +------+ +------+
|============WITHDRAW(CPD)===========>| |============WITHDRAW(CPD)===========>|
|<============PROCESSING==============| |<============PROCESSING==============|
skipping to change at line 1805 skipping to change at line 1804
The format of the UPDATE message is shown below: The format of the UPDATE message is shown below:
<UPDATE Message> ::= <VERSION> <UPDATE Message> ::= <VERSION>
<METHOD_CODE> <METHOD_CODE>
<SEQUENCE_NUMBER> <SEQUENCE_NUMBER>
<TRANSACTION_ID> <TRANSACTION_ID>
<CUSTOMER_ORDER_IDENTIFIER> <CUSTOMER_ORDER_IDENTIFIER>
<PROVIDER_ORDER_IDENTIFIER> <PROVIDER_ORDER_IDENTIFIER>
<NONCE> <NONCE>
<EXPECTED_RESPONSE_TIME> <EXPECTED_RESPONSE_TIME>
<REQUESTED_CONNECTIVITY_PROVISIONING_DOCUMENT> <REQUESTED_CPD>
[<INFORMATION_ELEMENT>...] [<INFORMATION_ELEMENT>...]
This message is sent by the CPNP client to update an existing service This message is sent by the CPNP client to update an existing service
agreement (e.g., Accepted CPD). The UPDATE message must include the agreement (e.g., Accepted CPD). The UPDATE message must include the
same CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE same CUSTOMER_ORDER_IDENTIFIER, PROVIDER_ORDER_IDENTIFIER, and NONCE
as those used when creating the order. The CPNP client includes a as those used when creating the order. The CPNP client includes a
new service description (e.g., Updated CPD) that integrates the new service description (e.g., Updated CPD) that integrates the
requested modifications. A new Transaction_ID must be assigned by requested modifications. A new Transaction_ID must be assigned by
the client. the client.
skipping to change at line 2406 skipping to change at line 2405
The client and the server must be mutually authenticated. The client and the server must be mutually authenticated.
Authenticated encryption must be used for data confidentiality and Authenticated encryption must be used for data confidentiality and
message integrity. message integrity.
The protocol does not provide security mechanisms to protect the The protocol does not provide security mechanisms to protect the
confidentiality and integrity of the packets transported between the confidentiality and integrity of the packets transported between the
client and the server. An underlying security protocol such as client and the server. An underlying security protocol such as
(e.g., Datagram Transport Layer Security (DTLS) [RFC6347], Transport (e.g., Datagram Transport Layer Security (DTLS) [RFC6347], Transport
Layer Security (TLS) [RFC8446]) must be used to protect the integrity Layer Security (TLS) [RFC8446]) must be used to protect the integrity
and confidentiality of protocol messages. In this case, if it is and confidentiality of protocol messages. In this case, if it is
possible to provide automated key management and associate each possible to provide automated key management (Section 2.1 of
transaction with a different key, inter-transaction replay attacks [RFC4107]) and associate each transaction with a different key,
can naturally be addressed. If the client and the server use a inter-transaction replay attacks can naturally be addressed. If the
single key, an additional mechanism should be provided to protect client and the server use a single key, an additional mechanism
against inter-transaction replay attacks between them. Clients must should be provided to protect against inter-transaction replay
implement DTLS record replay detection (Section 3.3 of [RFC6347]) or attacks between them. Clients must implement DTLS record replay
an equivalent mechanism to protect against replay attacks. detection (Section 3.3 of [RFC6347]) or an equivalent mechanism to
protect against replay attacks.
DTLS and TLS with a cipher suite offering confidentiality protection DTLS and TLS with a cipher suite offering confidentiality protection
and the guidance given in [RFC7525] must be followed to avoid attacks and the guidance given in [RFC7525] must be followed to avoid attacks
on (D)TLS. on (D)TLS.
The client must silently discard CPNP responses received from unknown The client must silently discard CPNP responses received from unknown
CPNP servers. The use of a randomly generated Transaction-ID makes CPNP servers. The use of a randomly generated Transaction-ID makes
it hard to forge a response from a server with a spoofed IP address it hard to forge a response from a server with a spoofed IP address
belonging to a legitimate CPNP server. Furthermore, CPNP demands belonging to a legitimate CPNP server. Furthermore, CPNP demands
that messages from the server must include the correct identifiers of that messages from the server must include the correct identifiers of
skipping to change at line 2559 skipping to change at line 2559
K., Herzog, S., Reichmeyer, F., Yavatkar, R., and A. K., Herzog, S., Reichmeyer, F., Yavatkar, R., and A.
Smith, "COPS Usage for Policy Provisioning (COPS-PR)", Smith, "COPS Usage for Policy Provisioning (COPS-PR)",
RFC 3084, DOI 10.17487/RFC3084, March 2001, RFC 3084, DOI 10.17487/RFC3084, March 2001,
<https://www.rfc-editor.org/info/rfc3084>. <https://www.rfc-editor.org/info/rfc3084>.
[RFC4026] Andersson, L. and T. Madsen, "Provider Provisioned Virtual [RFC4026] Andersson, L. and T. Madsen, "Provider Provisioned Virtual
Private Network (VPN) Terminology", RFC 4026, Private Network (VPN) Terminology", RFC 4026,
DOI 10.17487/RFC4026, March 2005, DOI 10.17487/RFC4026, March 2005,
<https://www.rfc-editor.org/info/rfc4026>. <https://www.rfc-editor.org/info/rfc4026>.
[RFC4107] Bellovin, S. and R. Housley, "Guidelines for Cryptographic
Key Management", BCP 107, RFC 4107, DOI 10.17487/RFC4107,
June 2005, <https://www.rfc-editor.org/info/rfc4107>.
[RFC4176] El Mghazli, Y., Ed., Nadeau, T., Boucadair, M., Chan, K., [RFC4176] El Mghazli, Y., Ed., Nadeau, T., Boucadair, M., Chan, K.,
and A. Gonguet, "Framework for Layer 3 Virtual Private and A. Gonguet, "Framework for Layer 3 Virtual Private
Networks (L3VPN) Operations and Management", RFC 4176, Networks (L3VPN) Operations and Management", RFC 4176,
DOI 10.17487/RFC4176, October 2005, DOI 10.17487/RFC4176, October 2005,
<https://www.rfc-editor.org/info/rfc4176>. <https://www.rfc-editor.org/info/rfc4176>.
[RFC6125] Saint-Andre, P. and J. Hodges, "Representation and [RFC6125] Saint-Andre, P. and J. Hodges, "Representation and
Verification of Domain-Based Application Service Identity Verification of Domain-Based Application Service Identity
within Internet Public Key Infrastructure Using X.509 within Internet Public Key Infrastructure Using X.509
(PKIX) Certificates in the Context of Transport Layer (PKIX) Certificates in the Context of Transport Layer
 End of changes. 11 change blocks. 
17 lines changed or deleted 21 lines changed or added

This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/