Security Threats and Security Requirements for the Access Node Control Protocol
RFC 5713, “Security Threats and Security Requirements for the Access Node Control Protocol”, is an Informational document published in January 2010 by H. Moustafa, H. Tschofenig, S. De Cnodder. The canonical text is published by the RFC Editor.
Abstract
The Access Node Control Protocol (ANCP) aims to communicate Quality of Service (QoS)-related, service-related, and subscriber-related configurations and operations between a Network Access Server (NAS) and an Access Node (e.g., a Digital Subscriber Line Access Multiplexer (DSLAM)). The main goal of this protocol is to allow the NAS to configure, manage, and control access equipment, including the ability for the Access Nodes to report information to the NAS.
This present document investigates security threats that all ANCP nodes could encounter. This document develops a threat model for ANCP security, with the aim of deciding which security functions are required. Based on this, security requirements regarding the Access Node Control Protocol are defined. This document is not an Internet Standards Track specification; it is published for informational purposes.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 5713 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 5712 MPLS Traffic Engineering Soft Preemption
- RFC 5714 IP Fast Reroute Framework
- RFC 5711 Node Behavior upon Originating and Receiving Resource Reservation Protocol Path Error Messages
- RFC 5715 A Framework for Loop-Free Convergence
- RFC 5710 PathErr Message Triggered MPLS and GMPLS LSP Reroutes
- RFC 5716 Requirements for Federated File Systems
- RFC 5708 X.509 Key and Signature Encoding for the KeyNote Trust Management System
- RFC 5718 An In-Band Data Communication Network For the MPLS Transport Profile