Subject: [Rats] 802.1AR device identity

From: Guy Fedorkow <[email-masked]>
Date: Wed, 10 Mar 2021 15:58:32 +0000

Hi Laurence,
  We talked about device identity on the RATS call today.
  For RIV, we're relying on this IEEE spec:
https://1.ieee802.org/security/802-1ar/
  That spec defines Initial and Local Device Identities.  Initial DevID is set by the manufacturer and can't be changed or replaced, while the Local DevID can be set and erased by the owner of the gear.
  The spec doesn't address deciding which identity to use for any specific application, but the intent clearly is to allow the owner to use the manufacturer-supplied identity to install an owner-specific identity in a device, and erase the owner-specific identity leaving the manufacturer identity in place when the device is decommissioned.

  Many different specs must have examined this problem, but of course it never hurts to re-use some of these ideas where possible.
  Thx
/guy

Juniper Business Use Only