Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd
Upload
14K views

IoT System Management With NETCONF Protocol

NETCONF and YANG provide an effective framework for managing IoT systems. NETCONF allows retrieving and modifying configuration and state data using XML over SSH. YANG models the data using a schema. A management system uses NETCONF messages to configure IoT devices and receive notifications. The devices use NETCONF, YANG, and a transaction manager to securely validate and apply configurations. This enables reliable, scalable management of diverse IoT systems and devices.

Uploaded by

ravikumar rayala
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
14K views

IoT System Management With NETCONF Protocol

NETCONF and YANG provide an effective framework for managing IoT systems. NETCONF allows retrieving and modifying configuration and state data using XML over SSH. YANG models the data using a schema. A management system uses NETCONF messages to configure IoT devices and receive notifications. The devices use NETCONF, YANG, and a transaction manager to securely validate and apply configurations. This enables reliable, scalable management of diverse IoT systems and devices.

Uploaded by

ravikumar rayala
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 22

IoT System Management

with
NETCONF-YANG
Need for IoT Systems Management
• Automating Configuration

• Monitoring Operational & Statistical Data

• Improved Reliability

• System Wide Configurations

• Multiple System Configurations

• Retrieving & Reusing Configurations


Simple Network Management Protocol
(SNMP)
Limitations of SNMP
vSNMP is stateless in nature and each SNMP request contains
all the information to process the request. The application
needs to be intelligent to manage the device.

vSNMP is a connectionless protocol which uses UDP as the


transport protocol, making it unreliable as there was no
support for acknowledgement of requests.

vMIBs often lack writable objects without which device


configuration is not possible using SNMP.
Limitations of SNMP

vIt is difficult to differentiate between configuration and


state data in MIBs.

vRetrieving the current configuration from a device can


be difficult with SNMP.

vEarlier versions of SNMP did not have strong security


features.
Network Operator Requirements
• Ease of use
• Distinction between configuration and state data
• Fetch configuration and state data separately
• Configuration of the network as a whole
• Configuration transactions across devices
• Configuration deltas
• Dump and restore configurations
• Configuration validation

• Configuration database schemas

• Comparing configurations

• Role-based access control

• Consistency of access control lists:

• Multiple configuration sets

• Support for both data-oriented & task oriented access control


NETCONF
• Network Configuration Protocol (NETCONF) is
a session-based network management protocol.

• NETCONF allows retrieving state or


configuration data and manipulating
configuration data on network devices
NETCONF
§ NETCONF works on SSH transport protocol.
§ Transport layer provides end-to-end connectivity and
ensure reliable delivery of messages.
§ NETCONF uses XML-encoded Remote Procedure Calls
(RPCs) for framing request and response messages.
§ The RPC layer provides mechanism for encoding of RPC
calls and notifications.
§ NETCONF provides various operations to retrieve and
edit configuration data from network devices.
• NETCONF provides various operations to retrieve and edit
configuration data from network devices.

• The Content Layer consists of configuration and state data which is


XML-encoded.

• The schema of the configuration and state data is defined in a data


modeling language called YANG.

• NETCONF provides a clear separation of the configuration and state


data.

• The configuration data resides within a NETCONF configuration


datastore on the server.
YANG
• YANG is a data modeling language used to model configuration and
state data manipulated by the NETCONF protocol

• YANG modules contain the definitions of the configuration data,


state data, RPC calls that can be issued and the format of the
notifications.

• YANG modules defines the data exchanged between the NETCONF


client and server.

• A module comprises of a number of 'leaf' nodes which are organized


into a hierarchical tree structure.
YANG
• The 'leaf' nodes are specified using the 'leaf' or 'leaf-list'
constructs.

• Leaf nodes are organized using 'container' or 'list' constructs.

• A YANG module can import definitions from other modules.

• Constraints can be defined on the data nodes, e.g. allowed


values.

• YANG can model both configuration data and state data


using the 'config' statement.
YANG Module Example
• This YANG module is a YANG version of the toaster MIB

• The toaster YANG module begins with the header information


followed by identity declarations which define various bread types.

• The leaf nodes (‘toasterManufacturer’, ‘toasterModelNumber’ and


oasterStatus’) are defined in the ‘toaster’ container.

• Each leaf node definition has a type and optionally a description and
default value.

• The module has two RPC definitions (‘make-toast’ and ‘cancel-


toast’).
IoT Systems Management
with
NETCONF-YANG
ØManagement System : The operator uses a management
system to send NETCONF messages to configure the IoT
device and receives state information and notifications
from the device as NETCONF messages.

ØManagement API : allows management application to


start NETCONF sessions.

ØTransaction Manager: executes all the NETCONF


transactions and ensures that ACID properties hold true
for the trasactions.
§ Rollback Manager : is responsible for generating all the
transactions necessary to rollback a current configuration to
its original state.
§ Data Model Manager : Keeps track of all the YANG data
models and the corresponding managed objects. Also keeps
track of the applications which provide data for each part of
a data model.
§ C o n f i g u r a t i o n Va l i d a t o r : c h e c k s i f t h e r e s u l t i n g
configuration after applying a transaction would be a valid
configuration.
Configuration Database : contains both configuration and
operational data.

Configuration API : Using the configuration API the


application on the IoT device can be read configuration data
from the configuration datastore and write opeartional data
to the opearational datastore.

Data Provider API: Applications on the IoT device can


register for callbacks for variousevents using the Data
Provider API. Through the Data Provider API, the
applications can report statistics and opeartional data.
Steps for IoT device Management with
NETCONF-YANG
1) Create a YANG model of the system that defines the
configuration and state data of the system.

2) Complete the YANG model with the ‘Inctool’ which


comes with Libnetconf.

3) Fill in the IoT device mangement code in the


TransAPImodule .

4) Build the callbacks C file to generate the library file.


5) Load the YANG module and the TransAPImodule into
the Netopeer server using Netopeer manager tool.

6) The operator can now connect from the management


system to the Netopeer server using the Netopeer CLI.

7) Operator can issue NETCONF commands from the


Netopeer CLI. Command can be issued to change the
configuration data, get operational data or execute an RPC
on the IoT device.

You might also like