Subject: [netmod] draft-ietf-netmod-acl-model-11 issue #1

From: Mahesh Jethanandani <[email-masked]>
Date: Fri, 7 Jul 2017 13:54:05 -0700

Created issue #1 in github <https://github.com/netmod-wg/acl-model/issues/1> as “The current model does not support the concept of "containers" or object groups used to contain multiple objects per rule entry”.

with a description that says:

Some vendors define the concept of containers or object groups, which is used to contain objects such as host names, IP addresses, subnet, range of address, protocol, port numbers etc. A single action is then associated with the object group, e.g. permit, deny and/or log. This concept is not supported in the model currently.

Is this concept important to implement in the model? If so, feature statements and identities used in the model to allow vendors to define what they support, cannot be extended to such object groups.

Mahesh Jethanandani
[email-masked]