Subject: Re: [netmod] New revision of Internet Draft for ACL YANG module

From: "Alexander Clemm (alex)" <[email-masked]>
Date: Mon, 15 Oct 2012 18:10:50 +0000

Hello all,

We just wanted to let you know that Lisa, Andy, and I have posted  revision 01 of the Internet Draft for the ACL YANG module.  We are hoping to discuss this revision at the IETF meeting in Atlanta.

URL:             http://www.ietf.org/internet-drafts/draft-huang-netmod-acl-01.txt

Status:          http://datatracker.ietf.org/doc/draft-huang-netmod-acl

Htmlized:        http://tools.ietf.org/html/draft-huang-netmod-acl-01

Diff:            http://www.ietf.org/rfcdiff?url2=draft-huang-netmod-acl-01

Abstract:

   This document defines a YANG data model for the configuration of

   Access Control Lists (ACLs) on a device.

Here is a summary of the main changes  versus revision 00

-          "Streamlined" and simplified the design to become more modular.  Specifically, defined common groupings for ACEs (ACE-COMMON) and ACE filters (FILTER-COMMON), that span across different types of ACEs/ACLs and that are now used by the different containers.

-          Removed the action to reset counters

-          Removed the discriminators to distinguish between different ACL types

-          Changed capitalizations of node definitions to lower-case to be more conformant with industry best practices

-          Added an ACL config example

-          Added a list of open issues

-          Some general cleanup

We left the remark-or-filter as is - essentially the remark is not just a comment for an ACE, which would limit its scope to that ACE, but it is an entity in its own right, e.g. used to delineate sections of ACEs in an ACL.  While this may appear a bit odd, this reflects how actual systems behave today; retaining this behavior in our opinion will facilitate migration from CLI.

Thank you and kind regards
--- Alex