diff options
| author |   Hagop Bozawglanian <hagop.bozawglanian@att.com> | 2019-09-05 22:18:33 +0000 |
|---|---|---|
| committer | Hagop Bozawglanian <hagop.bozawglanian@att.com> | 2019-09-05 22:18:33 +0000 |
| commit | c9031a7fe28b8b53f844de4e12bce03682855cf8 (patch) | |
| tree | 34597e343f6b535113bbfa5a9b0aa75843c4920c /docs/Chapter7 | |
| parent | ce06279cbf236aa79b76473747b7433ce39fb69e (diff) | |
VNFRQTS - Security requirements batch 1
Issue-ID: VNFRQTS-691
Signed-off-by: Hagop Bozawglanian <hagop.bozawglanian@att.com>
Change-Id: I928985bf65bb616a058b39ca874abb857e964949
Diffstat (limited to 'docs/Chapter7')
| -rwxr-xr-x | docs/Chapter7/Monitoring-And-Management.rst | 31 | ||||
| -rw-r--r-- | docs/Chapter7/PNF-Plug-and-Play.rst | 17 |
2 files changed, 19 insertions, 29 deletions
diff --git a/docs/Chapter7/Monitoring-And-Management.rst b/docs/Chapter7/Monitoring-And-Management.rst index 24ad489..e6886aa 100755 --- a/docs/Chapter7/Monitoring-And-Management.rst +++ b/docs/Chapter7/Monitoring-And-Management.rst @@ -930,32 +930,31 @@ Security :target: VNF or PNF :keyword: MUST :introduced: casablanca - :updated: dublin - - The VNF or PNF **MUST** support the provisioning of security and authentication - parameters (HTTP username and password) in order to be able to authenticate - with DCAE (in ONAP). + :updated: el alto - Note: In R3, a username and password are used with the DCAE VES Event - Listener which are used for HTTP Basic Authentication. + If the VNF or PNF is using Basic Authentication, then the VNF or + PNF **MUST** support the provisioning of security and authentication + parameters (HTTP username and password) in order to be able to + authenticate with DCAE VES Event Listener. - Note: The configuration management and provisioning software are specific - to a vendor architecture. + Note: The configuration management and provisioning software + are specific to a vendor architecture. .. req:: :id: R-894004 :target: VNF or PNF :keyword: MUST :introduced: casablanca - :updated: dublin + :updated: el alto - When the VNF or PNF sets up a HTTP or HTTPS connection to the collector, it **MUST** - provide a username and password to the DCAE VES Collector for HTTP Basic - Authentication. + If the VNF or PNF is using Basic Authentication, then when the VNF + or PNF sets up a HTTPS connection to the DCAE VES Event Listener, + the VNF or PNF **MUST** provide a username and password to the + DCAE VES Event Listener in the Authorization header and the VNF + or PNF MUST support one-way TLS authentication. - Note: HTTP Basic Authentication has 4 steps: Request, Authenticate, - Authorization with Username/Password Credentials, and Authentication Status - as per RFC7617 and RFC 2617. + Note: In one-way TLS authentication, the client (VNF or PNF) + must authentication the server (DCAE) certificate. Bulk Performance Measurement ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/docs/Chapter7/PNF-Plug-and-Play.rst b/docs/Chapter7/PNF-Plug-and-Play.rst index ce60f81..a77416f 100644 --- a/docs/Chapter7/PNF-Plug-and-Play.rst +++ b/docs/Chapter7/PNF-Plug-and-Play.rst @@ -125,22 +125,13 @@ The following are the requirements related to PNF Plug and Play. .. req:: :id: R-763774 - :target: PNF + :target: VNF or PNF :keyword: MUST :introduced: casablanca + :updated: el alto - The PNF **MUST** support a HTTPS connection to the DCAE VES Event - Listener. - -.. req:: - :id: R-579051 - :target: PNF - :keyword: MAY - :introduced: casablanca - - The PNF **MAY** support a HTTP connection to the DCAE VES Event Listener. - - Note: HTTP is allowed but not recommended. + The VNF or PNF **MUST** support a HTTPS connection to the DCAE + VES Event Listener. .. req:: :id: R-686466 |