| rfc8993v5.txt | rfc8993.txt | |||
|---|---|---|---|---|
| skipping to change at line 560 ¶ | skipping to change at line 560 ¶ | |||
| negotiate and/or synchronize technical objectives (i.e., network | negotiate and/or synchronize technical objectives (i.e., network | |||
| parameters) of any kind and complexity. This requires some form of | parameters) of any kind and complexity. This requires some form of | |||
| signaling between autonomic nodes. Autonomic nodes implementing a | signaling between autonomic nodes. Autonomic nodes implementing a | |||
| specific use case might choose their own signaling protocol, as long | specific use case might choose their own signaling protocol, as long | |||
| as it fits the overall security model. However, in the general case, | as it fits the overall security model. However, in the general case, | |||
| any pair of autonomic nodes might need to communicate, so there needs | any pair of autonomic nodes might need to communicate, so there needs | |||
| to be a generic protocol for this. A prerequisite for this is that | to be a generic protocol for this. A prerequisite for this is that | |||
| autonomic nodes can discover each other without any preconfiguration, | autonomic nodes can discover each other without any preconfiguration, | |||
| as mentioned above. To be generic, discovery and signaling must be | as mentioned above. To be generic, discovery and signaling must be | |||
| able to handle any sort of technical objective, including ones that | able to handle any sort of technical objective, including ones that | |||
| require complex data structures. The document "A GeneRic Autonomic | require complex data structures. The document "GeneRic Autonomic | |||
| Signaling Protocol (GRASP)" [RFC8990] describes more detailed | Signaling Protocol (GRASP)" [RFC8990] describes more detailed | |||
| requirements for discovery, negotiation, and synchronization in an | requirements for discovery, negotiation, and synchronization in an | |||
| Autonomic Network. It also defines a protocol, called GRASP, for | Autonomic Network. It also defines a protocol, called GRASP, for | |||
| this purpose; GRASP includes an integrated but optional discovery | this purpose; GRASP includes an integrated but optional discovery | |||
| process. | process. | |||
| GRASP is normally expected to run inside the ACP (see Section 4.6) | GRASP is normally expected to run inside the ACP (see Section 4.6) | |||
| and to depend on the ACP for security. It may run insecurely for a | and to depend on the ACP for security. It may run insecurely for a | |||
| short time during bootstrapping. | short time during bootstrapping. | |||
| skipping to change at line 818 ¶ | skipping to change at line 818 ¶ | |||
| The first three (pledge, join proxy, join registrar) support together | The first three (pledge, join proxy, join registrar) support together | |||
| the trust enrollment process described in Section 5. For details see | the trust enrollment process described in Section 5. For details see | |||
| [RFC8995]. | [RFC8995]. | |||
| 6.3.1. Enrollment ASAs | 6.3.1. Enrollment ASAs | |||
| 6.3.1.1. The Pledge ASA | 6.3.1.1. The Pledge ASA | |||
| This ASA includes the function of an autonomic node that bootstraps | This ASA includes the function of an autonomic node that bootstraps | |||
| into the domain with the help of an join proxy ASA (see below). Such | into the domain with the help of a join proxy ASA (see below). Such | |||
| a node is known as a pledge during the enrollment process. This ASA | a node is known as a pledge during the enrollment process. This ASA | |||
| must be installed by default on all nodes that require an autonomic | must be installed by default on all nodes that require an autonomic | |||
| zero-touch bootstrap. | zero-touch bootstrap. | |||
| 6.3.1.2. The Join Proxy ASA | 6.3.1.2. The Join Proxy ASA | |||
| This ASA includes the function of an autonomic node that helps non- | This ASA includes the function of an autonomic node that helps non- | |||
| enrolled, adjacent devices to enroll into the domain. This ASA must | enrolled, adjacent devices to enroll into the domain. This ASA must | |||
| be installed on all nodes, although only one join proxy needs to be | be installed on all nodes, although only one join proxy needs to be | |||
| active on a given LAN. See also [RFC8995]. | active on a given LAN. See also [RFC8995]. | |||
| skipping to change at line 1269 ¶ | skipping to change at line 1269 ¶ | |||
| This document has no IANA actions. | This document has no IANA actions. | |||
| 11. References | 11. References | |||
| 11.1. Normative References | 11.1. Normative References | |||
| [IDevID] IEEE, "IEEE Standard for Local and metropolitan area | [IDevID] IEEE, "IEEE Standard for Local and metropolitan area | |||
| networks - Secure Device Identity", IEEE 802.1AR, | networks - Secure Device Identity", IEEE 802.1AR, | |||
| <https://1.ieee802.org/security/802-1ar>. | <https://1.ieee802.org/security/802-1ar>. | |||
| [RFC8990] Bormann, C., Carpenter, B., Ed., and B. Liu, Ed., "A | [RFC8990] Bormann, C., Carpenter, B., Ed., and B. Liu, Ed., "GeneRic | |||
| GeneRic Autonomic Signaling Protocol (GRASP)", RFC 8990, | Autonomic Signaling Protocol (GRASP)", RFC 8990, | |||
| DOI 10.17487/RFC8990, May 2021, | DOI 10.17487/RFC8990, May 2021, | |||
| <https://www.rfc-editor.org/info/rfc8990>. | <https://www.rfc-editor.org/info/rfc8990>. | |||
| [RFC8994] Eckert, T., Ed., Behringer, M., Ed., and S. Bjarnason, "An | [RFC8994] Eckert, T., Ed., Behringer, M., Ed., and S. Bjarnason, "An | |||
| Autonomic Control Plane (ACP)", RFC 8994, | Autonomic Control Plane (ACP)", RFC 8994, | |||
| DOI 10.17487/RFC8994, May 2021, | DOI 10.17487/RFC8994, May 2021, | |||
| <https://www.rfc-editor.org/info/rfc8994>. | <https://www.rfc-editor.org/info/rfc8994>. | |||
| [RFC8995] Pritikin, M., Richardson, M., Eckert, T., Behringer, M., | [RFC8995] Pritikin, M., Richardson, M., Eckert, T., Behringer, M., | |||
| and K. Watsen, "Bootstrapping Remote Secure Key | and K. Watsen, "Bootstrapping Remote Secure Key | |||
| End of changes. 3 change blocks. | ||||
| 4 lines changed or deleted | 4 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||