Subject: [Netconf] RFC6536 NACM - Need clarification on 'module-name'

From: "Madhusudanan S (madhs)" <[email-masked]>
Date: Sat, 8 Jul 2017 06:20:05 +0000

Hi,

I need a clarification in defining a NACM data-node rule for a XPATH which has multiple module-names.

Ex: Xpath:
/Cisco-IOS-XR-ifmgr-cfg:interface-configurations/Cisco-IOS-XR-ifmgr-cfg:interface-configuration/Cisco-IOS-XR-ipv4-io-cfg:ipv4-network/Cisco-IOS-XR-ipv4-io-cfg:addresses/Cisco-IOS-XR-ipv4-io-cfg:primary/Cisco-IOS-XR-ipv4-io-cfg:address

Above XPATH leaf belong to module Cisco-IOS-XR-ipv4-io-cfg &augmented from module Cisco-IOS-XR-ifmgr-cfg.

As per RFC, data-node rule can take only one module name.

            +--rw rule [name]
               +--rw name                 string
               +--rw module-name?         union
               +--rw (rule-type)?
               |  +--:(protocol-operation)
               |  |  +--rw rpc-name?            union
               |  +--:(notification)
               |  |  +--rw notification-name?   union
               |  +--:(data-node)
               |     +--rw path                 node-instance-identifier
               +--rw access-operations?   union
               +--rw action               action-type
               +--rw comment?             string

What is the correct method to define rules in this case? (Instead of a * in module-name)
Examples given in RFC, doesn’t set a ‘module-name’ for data-node rule.

Regards
Madhu