Service Automation and Dynamic Provisioning Techniques in IP/MPLS Environments

348 Pages·2008·3.875 MB·English

by  Christian Jacquenet, Gilles Bourdon, Mohamed Boucadair

SERVICE AUTOMATION AND
DYNAMIC PROVISIONING
TECHNIQUES IN IP/MPLS
ENVIRONMENTS
WILEY SERIES IN COMMUNICATIONS NETWORKING & DISTRIBUTED
SYSTEMS
Series Editor: David Hutchison, Lancaster University, Lancaster, UK
Series Advisers: Serge Fdida, Universite´ Pierre et Marie Curie, Paris, France
Joe Sventek, University of Glasgow, Glasgow, UK
The ‘Wiley Series in Communications Networking & Distributed Systems’ is a series of
expert-level, technically detailed books covering cutting-edge research, and brand new
developments as well as tutorial-style treatments in networking, middleware and software
technologies for communications and distributed systems. The books will provide timely
and reliable information about the state-of-the-art to researchers, advanced students and
development engineers in the Telecommunications and the Computing sectors.
Other titles in the series:
Wright: Voice over Packet Networks 0-471-49516-6 (February 2001)
Jepsen: Java for Telecommunications 0-471-49826-2 (July 2001)
Sutton: Secure Communications 0-471-49904-8 (December 2001)
Stajano: Security for Ubiquitous Computing 0-470-84493-0 (February 2002)
Martin-Flatin: Web-Based Management of IP Networks and Systems,
0-471-48702-3 (September 2002)
Berman, Fox, Hey: Grid Computing. Making the Global Infrastructure a Reality,
0-470-85319-0 (March 2003)
Turner, Magill, Marples: Service Provision. Technologies for Next Generation
Communications 0-470-85066-3 (April 2004)
Welzl: Network CongestionControl: Managing Internet Traffic0-470-02528-X (July 2005)
Raz, Juhola, Serrat-Fernandez, Galis: Fast and Efficient Context-Aware Services
0-470-01668-X (April 2006)
Heckmann: The Competitive Internet Service Provider 0-470-01293-5 (April 2006)
Dressler:Self-OrganizationinSensorandActorNetworks0-470-02820-3(November2007)
Berndt:Towards4GTechnologies:ServiceswithInitiative978-0-470-01031-0(March2008)
SERVICE AUTOMATION
AND DYNAMIC
PROVISIONING
TECHNIQUES IN IP/MPLS
ENVIRONMENTS
Christian Jacquenet, Gilles Bourdon and Mohamed Boucadair
All at
France Telecom, France
Copyright#2008 JohnWiley&SonsLtd,TheAtrium,SouthernGate,Chichester,
WestSussexPO198SQ,England
Telephone(þ44)1243779777
Email(forordersandcustomerserviceenquiries):[email protected]
VisitourHomePageonwww.wiley.com
AllRightsReserved.Nopartofthispublicationmaybereproduced,storedinaretrievalsystemortransmitted
inanyformorbyanymeans,electronic,mechanical,photocopying,recording,scanningorotherwise,exceptundertheterms
oftheCopyright,DesignsandPatentsAct1988orunderthetermsofalicenceissuedbytheCopyright
LicensingAgencyLtd,90TottenhamCourtRoad,LondonW1T4LP,UK,withoutthepermissioninwriting
ofthePublisher.RequeststothePublishershouldbeaddressedtothePermissionsDepartment,JohnWiley&SonsLtd,The
Atrium,SouthernGate,Chichester,WestSussexPO198SQ,England,[email protected],orfaxedto(þ44)
1243770620.
Designationsusedbycompaniestodistinguishtheirproductsareoftenclaimedastrademarks.Allbrandnames
andproductnamesusedinthisbookaretradenames,servicemarks,trademarksorregisteredtrademarks
oftheirrespectiveowners.ThePublisherisnotassociatedwithanyproductorvendormentionedinthisbook.
Alltrademarksreferredtointhetextofthispublicationarethepropertyoftheirrespectiveowners.
Thispublicationisdesignedtoprovideaccurateandauthoritativeinformationinregardtothesubjectmattercovered.Itis
soldontheunderstandingthatthePublisherisnotengagedinrenderingprofessionalservices.Ifprofessionaladviceorother
expertassistanceisrequired,theservicesofacompetentprofessionalshouldbesought.
OtherWileyEditorialOffices
JohnWiley&SonsInc.,111RiverStreet,Hoboken,NJ07030,USA
Jossey-Bass,989MarketStreet,SanFrancisco,CA94103-1741,USA
Wiley-VCHVerlagGmbH,Boschstr.12,D-69469Weinheim,Germany
JohnWiley&SonsAustraliaLtd,42McDougallStreet,Milton,Queensland4064,Australia
JohnWiley&Sons(Asia)PteLtd,2ClementiLoop#02-01,JinXingDistripark,Singapore129809
JohnWiley&SonsCanadaLtd,6045FreemontBlvd,Mississauga,ONT,L5R4J3,Canada
Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprintmaynotbe
availableinelectronicbooks.
LibraryofCongressCataloging-in-PublicationData
Jacquenet,Christian.
ServiceautomationanddynamicprovisioningtechniquesinIP/MPLS
environments/ChristianJacquenet,GillesBourdonandMohamedBoucadair.
p.cm.
Includesindex.
ISBN978-0-470-01829-3(cloth:alk.paper)
1. MPLSstandard. 2. TCP/IP(Computernetworkprotocol) I. Bourdon,
Gilles. II. BoucadaIr,Mohamed. III. Title.
TK5105.573.J332008
004.6’2–dc22
2007043741
BritishLibraryCataloguinginPublicationData
AcataloguerecordforthisbookisavailablefromtheBritishLibrary
ISBN978-0-470-01829-3(HB)
Typesetin10/12ptTimesbyThomsonDigital,India.
PrintedandboundinGreatBritainbyAntonyRoweLtd,Chippenham,England.
Thisbookisprintedonacid-freepaper.
Contents
Preface xi
Acknowledgements xiii
PARTI ARCHITECTURESANDPROTOCOLSFORSERVICE
AUTOMATION 1
1 Introduction 3
1.1 ToBeginWith 3
1.1.1 OnIPNetworksinGeneral,andRoutersinParticular 3
1.1.2 OntheUsefulnessofDynamicRoutingProtocols
inIPNetworks 5
1.1.3 OntheInabilityofanIGPtoAddressInterdomain
CommunicationNeeds 7
1.1.4 OntheBGP-4Protocol 9
1.1.5 TheRiseofMPLS 10
1.2 ContextandMotivationofthisBook 13
1.2.1 ClassifyingCapabilities 14
1.2.2 ServicesandPolicies 14
1.2.3 TheNeedforAutomation 15
1.3 HowthisBookisOrganized 16
1.4 WhatIsandWhatShouldNeverBe 16
References 16
2 BasicConcepts 19
2.1 WhatisaPolicy? 19
2.2 DerivingPoliciesintoRulesandConfigurationTasks 19
2.2.1 Instantiation 20
2.2.2 DeviceIdentification 20
2.2.3 Translation 21
2.3 StoringPolicies 21
2.4 PolicyandDeviceConfiguration 21
2.5 Policy-basedManagementModel 22
2.5.1 ReachingaPolicyDecision 24
2.5.2 RequirementsforaPEP–PDPCommunicationProtocol 24
References 25
vi Contents
3 TheRADIUSProtocolanditsExtensions 27
3.1 ProtocolDesign 27
3.1.1 ProtocolStructureandMessages 28
3.1.2 ForcesandWeaknessess 36
3.1.3 AuthorizationandProvisioningwithRADIUS 39
3.2 RadiusExtensions 44
3.2.1 EAPSupportwithRADIUS 44
3.2.2 InterimAccounting 47
3.2.3 DynamicAuthorization 49
3.2.4 UsingRADIUSforAssignment,PrioritizationandFiltering
withVLANs 51
3.2.5 FilteringIPTraffic 52
3.2.6 FutureExtensions 53
3.2.7 RADIUSanditsFuture 55
References 59
4 TheDiameterProtocol 61
4.1 LearningfromRADIUSDeficiencies 61
4.1.1 GeneralRequirements 62
4.1.2 AuthenticationRequirements 63
4.1.3 AuthorizationRequirements 64
4.1.4 AccountingRequirements 64
4.1.5 DiameterisBorn 64
4.2 Diameter:MainCharacteristics 65
4.2.1 DiameterNetworkEntities 66
4.2.2 DiameterApplications 67
4.2.3 SessionsandConnections 67
4.2.4 DiameterRouting 68
4.2.5 PeerDiscovery 70
4.2.6 PeerConnectionMaintenanceforReliable
Transmissions 71
4.3 ProtocolDetails 71
4.3.1 DiameterHeader 71
4.3.2 AVPFormat 73
4.3.3 CommandCodes 74
4.3.4 Accounting 76
4.4 DiameterNetworkAccessApplication(NASREQ) 76
4.4.1 AVPUsageforNASREQ 77
4.4.2 EnhancedAuthorizationParameters 78
4.4.3 EnhancedAuthorizationExamples 80
4.5 DiameterCreditControlApplication 81
4.6 DiameterinNGN/IMSArchitectureforQoSControl 82
4.6.1 WhatisanNGN? 82
4.6.2 QoSControlinETSI/TISPANArchitecture 85
References 90
Contents vii
5 TheCommonOpenPolicyService(COPS)Protocol 91
5.1 ANewSchemeforPolicy-basedAdmissionControl 91
5.2 AClient–ServerArchitecture 92
5.3 TheCOPSProtocol 94
5.3.1 TheCOPSHeader 94
5.3.2 TheCOPSMessageObjects 95
5.4 COPSMessages 97
5.4.1 Client-Open(OPN) 97
5.4.2 Client-Accept(CAT) 97
5.4.3 Request(REQ) 97
5.4.4 Decision(DEC) 98
5.4.5 OtherCOPSMessages 99
5.5 SummaryofCOPSOperations 100
5.6 UseofCOPSinOutsourcingMode 101
5.7 UseofCOPSinProvisioningMode 101
5.7.1 OntheImpactofProvisioningModeonCOPSOperations 102
5.7.2 OntheImpactofProvisioningModeonPEP–PDPExchanges 103
5.8 SecurityofCOPSMessages 104
References 104
6 TheNETCONFProtocol 105
6.1 NETCONFataGlance 105
6.1.1 Introduction 105
6.1.2 MotivationsforIntroducingNETCONF 106
6.1.3 NETCONF,anIETFInitiative 107
6.1.4 MissionsoftheIETFNETCONFWorkingGroup 107
6.1.5 NETCONF-relatedLiterature 108
6.1.6 WhatisIn?WhatisOut? 109
6.2 NETCONFProtocolOverview 109
6.2.1 SomeWordsaboutXML 110
6.2.2 NETCONFTerminology 114
6.2.3 NETCONFLayerModel 114
6.2.4 NETCONFCommunicationPhases 116
6.2.5 NETCONFData 117
6.2.6 NETCONFCapabilityExchange 118
6.2.7 RPCLayer 120
6.2.8 NETCONFFiltering 129
6.3 NETCONFProtocolOperations 130
6.3.1 RetrieveConfigurationData 135
6.3.2 Get 137
6.3.3 DeleteConfigurationData 137
6.3.4 CopyConfiguration 138
6.3.5 EditConfigurationData 139
6.3.6 CloseaNETCONFSession 142
6.3.7 KillaSession 143
viii Contents
6.3.8 LockNETCONFSessions 144
6.3.9 UnlockNETCONFSessions 145
6.3.10 ValidateConfigurationData 146
6.3.11 CommitConfigurationChanges 148
6.3.12 DiscardChangesofConfigurationData 149
6.3.13 NETCONFNotificationProcedure 149
6.4 NETCONFTransportProtocol 153
6.4.1 NETCONFasTransport-independentProtocol 153
6.4.2 TransportProtocolAlternatives 153
6.5 NETCONFCapabilities 162
6.5.1 URLCapability 163
6.5.2 XPathCapability 165
6.5.3 Writable-RunningCapability 166
6.5.4 CandidateConfigurationCapability 167
6.5.5 ConfirmedCommitCapability 167
6.5.6 ValidateCapability 168
6.5.7 DistinctStartupCapability 169
6.5.8 RollbackonErrorCapability 170
6.5.9 NotificationCapability 171
6.6 ConfiguringaNetworkDevice 171
6.7 NETCONFContentLayer 173
References 173
7 ControlandProvisioningofWirelessAccessPoints(CAPWAP) 175
7.1 CAPWAPtoAddressAccessPointProvisioningChallenges 176
7.2 CAPWAPConceptsandTerminology 176
7.3 Objectives:WhatdoweExpectfromCAPWAP? 180
7.4 CAPWAPCandidateProtocols 182
7.5 TheCAPWAPProtocol 183
7.6 CAPWAPFuture 186
References 186
PARTII APPLICATIONEXAMPLESOFSERVICEAUTOMATION
ANDDYNAMICRESOURCEPROVISIONINGTECHNIQUES 187
8 DynamicEnforcementofQoSPolicies 189
8.1 Introduction 189
8.1.1 WhatisQualityofService,Anyway? 189
8.1.2 TheNeedforServiceLevelSpecifications 192
8.2 AnExample 193
8.3 EnforcingQoSPoliciesinHeterogeneousEnvironments 193
8.3.1 SLS-inferredQoSPolicyEnforcementSchemes 193
8.3.2 PolicyRulesforConfiguringDiffServElements 197
References 198