RFC 3871           Operational Security Requirements      September 2004

      The use of the RFC 2119 keywords is an attempt, by the editor, to

      assign the correct requirement levels ("MUST", "SHOULD",

      "MAY"...).  It must be noted that different organizations,

      operational environments, policies and legal environments will

      generate different requirement levels.  Operators and vendors

      should carefully consider the individual requirements listed here

      in their own context.  One size does not fit all.

   Bogon.

      A "Bogon" (plural: "bogons") is a packet with an IP source address

      in an address block not yet allocated by IANA or the Regional

      Internet Registries (ARIN, RIPE, APNIC...) as well as all

      addresses reserved for private or special use by RFCs.  See

      [RFC3330] and [RFC1918].

   CLI.

      Several requirements refer to a Command Line Interface (CLI).

      While this refers at present to a classic text oriented command

      interface, it is not intended to preclude other mechanisms which

      may meet all the requirements that reference "CLI".

   Console.

      Several requirements refer to a "Console".  The model for this is

      the classic RS232 serial port which has, for the past 30 or more

      years, provided a simple, stable, reliable, well understood and

      nearly ubiquitous management interface to network devices.  Again,

      these requirements are intended primarily to codify the benefits

      provided by that venerable interface, not to preclude other

      mechanisms that meet all the same requirements.

   Filter.

      In this document, a "filter" is defined as a group of one or more

      rules where each rule specifies one or more match criteria as

      specified in Section 2.8.

   In Band management.

      "In Band management" is defined as any management done over the

      same channels and interfaces used for user/customer data.

      Examples would include using SSH for management via customer or

      Internet facing network interfaces.

Jones                        Informational                      [Page 8]