openconfig-gnsi

openconfig-version: 0.1.0

Description

This module defines a set of extensions that provide gNSI (the gRPC Network Security Interface) specific extensions to the OpenConfig data models. Specifically, the parameters for the configuration of the service, and configuration and state are added.

The gNSI protobufs and documentation are published at https://github.com/openconfig/gnsi.

Imports

openconfig-extensions
openconfig-system-grpc

Identities

Data elements

openconfig-gnsi-acctz

openconfig-version: 0.4.0

Description

This module provides counters of gNSI accountZ requests and responses and the quantity of data transferred.

Imports

openconfig-extensions
openconfig-system
openconfig-system-grpc
openconfig-yang-types
openconfig-gnsi

Defined types

cmd-service

description:
enum CommandService.CmdServiceType

type: enumeration

grpc-service

description:
enum GrpcService.GrpcServiceType

type: enumeration

session-service

description:
enum SessionInfo.SessionStatus

type: enumeration

service-request

description:
enum RecordResponse.service_request

type: enumeration

service-type

description:
enum cmd or grpc service type

type: union

    type: cmd-service

    type: grpc-service

    type: session-service

Data elements

openconfig-gnsi-authz

openconfig-version: 0.4.0

Description

This module provides a data model for the metadata of the gRPC authorization policies installed on a networking device.

Imports

openconfig-extensions
openconfig-system
openconfig-system-grpc
openconfig-types
openconfig-yang-types
openconfig-gnsi

Defined types

version

description:
The version ID of the gRPC authorization policy as provided by the gRPC Authorization Policy Manager when the policy was pushed. This leaf persists through a reboot.

type: string

created-on

description:
The creation time of the gRPC authorization policy as reported by the gRPC Authorization Policy manager when the policy was pushed to the device. This value is reported as nanoseconds since epoch (January 1st, 1970 00:00:00 GMT). This leaf persists through a reboot.

type: oc-types:timeticks64

Data elements

openconfig-gnsi-certz

openconfig-version: 0.7.0

Description

This module provides a data model for the metadata of gRPC credentials installed on a networking device.

Imports

openconfig-extensions
openconfig-system
openconfig-system-grpc
openconfig-types
openconfig-yang-types
openconfig-gnsi

Defined types

version

description:
The version ID of the credential as provided by the credential manager when the credential was pushed. This leaf persists through a reboot.

type: string

Data elements

openconfig-gnsi-credentialz

openconfig-version: 0.9.0

Description

This module provides a data model for the metadata of SSH and console credentials installed on a networking device.

The following leaves MUST be treated as invalid when the gNSI server is enabled and credentialz is supported by the implementation: /system/aaa/authentication/users/user/config/ssh-key /system/aaa/authentication/users/user/state/ssh-key /system/aaa/authentication/users/user/config/password /system/aaa/authentication/users/user/state/password /system/aaa/authentication/users/user/config/password-hashed /system/aaa/authentication/users/user/state/password-hashed

Imports

openconfig-extensions
openconfig-system
openconfig-types
openconfig-yang-types
openconfig-system-grpc
openconfig-gnsi

Defined types

version

description:
The version ID of the credential as provided by the credential manager when the credential was pushed. This leaf persists through a reboot.

type: string

Data elements

openconfig-gnsi-pathz

openconfig-version: 0.3.0

Description

This module provides a data model for the metadata of OpenConfig-path-based authorization policies installed on a networking device.

Imports

openconfig-extensions
openconfig-system
openconfig-system-grpc
openconfig-types
openconfig-yang-types
openconfig-gnsi

Defined types

version

description:
The version ID of the OpenConfig-path-based authorization policy as provided by the OpenConfig-path-based Authorization Policy Manager when the policy was pushed. This leaf persists through a reboot.

type: string

created-on

description:
The creation time of the OpenConfig-path-based authorization policy as reported by the OpenConfig-path-based Authorization Policy manager when the policy was pushed to the device. This value is reported as nanoseconds since epoch (January 1st, 1970 00:00:00 GMT). This leaf persists through a reboot.

type: oc-types:timeticks64

Data elements