INTAREAInternet Engineering Task Force (IETF) R. BonicaInternet-DraftRequest for Comments: 8335 R. Thomas Updates: 4884(if approved)Juniper NetworksIntended status:Category: Standards Track J. LinkovaExpires: June 18, 2018ISSN: 2070-1721 Google C. Lenart Verizon M. Boucadair OrangeDecember 15, 2017February 2018 PROBE: A UtilityForfor Probing Interfacesdraft-ietf-intarea-probe-10Abstract This document describes a network diagnostic tool called PROBE. PROBE is similar toPING,PING in that it can be used to query the status of a probedinterface. Itinterface, but it differs from PING in that it does not require bidirectional connectivity between the probing and probed interfaces. Instead, PROBE requires bidirectional connectivity between the probing interface and a proxy interface. The proxy interface can reside on the same node as the probedinterfaceinterface, or it can reside on a node to which the probed interface is directly connected. This document updates RFC 4884. Status of This Memo ThisInternet-Draftissubmitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documentsan Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF).Note that other groups may also distribute working documents as Internet-Drafts. The listIt represents the consensus ofcurrent Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents validthe IETF community. It has received public review and has been approved fora maximumpublication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841. Information about the current status ofsix monthsthis document, any errata, and how to provide feedback on it may beupdated, replaced, or obsoleted by other documentsobtained atany time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on June 18, 2018.https://www.rfc-editor.org/info/rfc8335. Copyright Notice Copyright (c)20172018 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 1.1. Terminology . . . . . . . . . . . . . . . . . . . . . . . 4 1.2. Requirements Language . . . . . . . . . . . . . . . . . . 4 2. ICMP Extended Echo Request . . . . . . . . . . . . . . . . . 4 2.1. Interface Identification Object . . . . . . . . . . . . . 6 3. ICMP Extended Echo Reply . . . . . . . . . . . . . . . . . . 7 4. ICMP Message Processing . . . . . . . . . . . . . . . . . . . 9 4.1. Code Field Processing . . . . . . . . . . . . . . . . . . 10 5.Use-CasesUse Cases . . . . . . . . . . . . . . . . . . . . . . . . . . 11 6. Updates to RFC 4884 . . . . . . . . . . . . . . . . . . . . . 12 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 12 8. Security Considerations . . . . . . . . . . . . . . . . . . . 13 9. References . . . . . . . . . . . . . . . . . . . . . . . . . 14 9.1. Normative References . . . . . . . . . . . . . . . . . . 14 9.2. Informative References . . . . . . . . . . . . . . . . . 15 Appendix A. The PROBE Application . . . . . . . . . . . . . . .1516 Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . .1617 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . .1617 1. Introduction Network operators use PING [RFC2151] to test bidirectional connectivity between two interfaces. For the purposes of this document,we will callthese interfaces are called the probing and probed interfaces. PING sends an ICMP [RFC0792] [RFC4443] Echo Request message from the probing interface to the probed interface. The probing interface resides on a probing node while the probed interface resides on a probed node. If the probed interface receives the ICMP Echo Request message, it returns an ICMP Echo Reply. When the probing interface receives the ICMP Echo Reply, it has verified bidirectional connectivity between the probing and probed interfaces. Specifically, it has verified that: o The probing node can reach the probedinterfaceinterface. o The probed interface isactiveactive. o The probed node can reach the probinginterfaceinterface. o The probing interface isactiveactive. This document describes a network diagnostic tool called PROBE. PROBE is similar toPING,PING in that it can be used to query the status of a probedinterface. Itinterface, but it differs from PING in that it does not require bidirectional connectivity between the probing and probed interfaces. Instead, PROBE requires bidirectional connectivity between the probing interface and a proxy interface. The proxy interface can reside on the same node as the probedinterfaceinterface, or it can reside on a node to which the probed interface is directly connected. Section 5 of this document describes scenarios in which this characteristic is useful. Like PING, PROBE executes on a probing node. It sends an ICMP Extended Echo Request message from a local interface, called the probing interface, to a proxy interface. The proxy interface resides on a proxy node. The ICMP Extended Echo Request contains an ICMP Extension Structure and the ICMP Extension Structure contains an Interface Identification Object. The Interface Identification Object identifies the probed interface. The probed interface can reside onthe proxy nodeorit can bedirectlyconnectedconnect to the proxy node. When the proxy interface receives the ICMP Extended Echo Request, the proxy node executes access control procedures. If access is granted, the proxy node determines the status of the probed interface and returns an ICMP Extended Echo ReplyMessage.message. The ICMP Extended Echo Reply indicates the status of the probed interface. If the probed interface resides on the proxy node, PROBE determines the status of the probed interface as it would determine its oper- status [RFC7223]. If oper-status is equal toup'up' (1), PROBE reports that the probed interface is active. Otherwise, PROBE reports that the probed interface is inactive. If the probed interface resides on a node that is directly connected to theprobedproxy node, and the probed interface appears in the IPv4 Address Resolution Protocol (ARP) table [RFC0826] or IPv6 Neighbor Cache [RFC4861], PROBE reports interface reachability. Otherwise, PROBE reports that the table entry does not exist. 1.1. Terminology This document uses the following terms: o Probinginterface -interface: The interface that sends the ICMP Extended EchoRequestRequest. o Probingnode -node: The node upon which the probing interfaceresidesresides. o Proxyinterface -interface: The interface to which the ICMP Extended Echo Request message issentsent. o Proxynode -node: The node upon which the proxy interfaceresidesresides. o Probedinterface -interface: The interface whose status is beingqueriedqueried. o Probednode -node: The node upon which the probed interface resides. If the proxy interface and the probed interface reside upon the same node, the proxy node is also the probed node. Otherwise, the proxy node is directly connected to the probed node. 1.2. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. 2. ICMP Extended Echo Request The ICMP Extended Echo Request message is defined for both ICMPv4 and ICMPv6. Like any ICMP message, the ICMP Extended Echo Request message is encapsulated in an IP header. The ICMPv4 version of the Extended Echo Request message is encapsulated in an IPv4 header, while the ICMPv6 version is encapsulated in an IPv6 header. Figure 1 depicts the ICMP Extended Echo Request message. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Code | Checksum | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Identifier |Sequence Number| Reserved |L| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ICMP Extension Structure Figure 1: ICMP Extended Echo Request Message IP Header fields: o Source Address: The Source Address identifies the probing interface. It MUST be a valid IPv4 or IPv6 unicast address. o Destination Address: The Destination Address identifies the proxy interface. ItcanMUST be aunicast, multicast or anycastunicast address. ICMP fields: o Type: Extended Echo Request. The value for ICMPv4 isTTT0. <RFC Editor: Please replace TTT0 with the ICMPv4 type number for Extended Echo Request>.42. The value for ICMPv6 isTTT1. <RFC Editor: Please replace TTT1 with the ICMPv6 type number for Extended Echo Request> .160. o Code: MUST be set to 0 and MUST be ignored upon receipt. o Checksum: For ICMPv4, see RFC 792. For ICMPv6, see RFC 4443. o Identifier: AnidentifierIdentifier to aid in matching Extended Echo Replies to Extended Echo Requests. May bezero.0. o Sequence Number: Asequence numberSequence Number to aid in matching Extended Echo Replies to Extended Echo Requests. May bezero.0. o Reserved: This field MUST be set tozero0 and ignored upon receipt. o L(local) -(local): The L-bit is set if the probed interface resides on the proxy node. The L-bit is clear if the probed interface is directly connected to the proxy node. o ICMP Extension Structure: The ICMP Extension Structure identifies the probed interface. Section 7 of [RFC4884] defines the ICMP Extension Structure. As per RFC 4884, the Extension Structure contains exactly one Extension Header followed by one or more objects. When applied to the ICMP Extended Echo Request message, the ICMP Extension Structure MUST contain exactly one instance of the Interface Identification Object(Section(see Section 2.1). If the L-bit is set, the Interface Identification Object can identify the probed interface by name,indexindex, or address.ItIf the L-bit is clear, the Interface Identification Object MUST identify the probed interface by address. If the Interface Identification Object identifies the probed interface by address, that address can be a member of any address family. For example, an ICMPv4 Extended Echo Request message can carry an Interface Identification Object that identifies the probed interface by IPv4,IPv6IPv6, or IEEE 802 address. Likewise, an ICMPv6 Extended Echo Request message can carry an Interface Identification Object that identifies the probed interface by IPv4,IPv6IPv6, or IEEE 802 address. 2.1. Interface Identification Object The Interface Identification Object identifies the probed interface by name, index, or address. Like any other ICMP Extension Object, it contains an Object Header and Object Payload. The Object Header contains the following fields: o Class-Num: Interface Identification Object.ValueThe value isTTT2. <RFC Editor: Please replace TTT2 with the Class-Num for the Interface Identification Object>3. oC-type:C-Type: Valuesare:are (1) Identifies InterfaceByby Name, (2) Identifies InterfaceByby Index, and (3) Identifies InterfaceBy Addressby Address. o Length: Length of the object, measured in octets, including theobject headerObject Header andobject payload.Object Payload. If the Interface Identification Object identifies the probed interface by name, theobject payloadObject Payload MUST be the interface name as defined in [RFC7223]. If theobject payloadObject Payload would not otherwise terminate on a 32-bit boundary, it MUST be padded with ASCII NULL characters. If the Interface Identification Object identifies the probed interface by index, the length is equal to 8 and the payload contains the if-index [RFC7223]. If the Interface Identification Object identifies the probed interface by address, the payload is as depicted in Figure 2. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI | Address Length| Reserved | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Address .... Figure 2: Interface Identification Object -C-typeC-Type 3 Payload Payload fields are defined as follows: o Address Family Identifier (AFI): This 16-bit field identifies the type of address represented by the Address field. All values found in the IANA registry of Address Family Numbers (available from<https://www.iana.org/assignments/address-family-numbers/ address-family-numbers.xhtml>)<https://www.iana.org/assignments/address-family-numbers>) are valid in this field. o AddressLength -Length: Number of significant bytes contained by the Address field. (TheaddressAddress field contains significant bytes and paddingbytes)bytes.) o Reserved: This field MUST be set tozero0 and ignored upon receipt. o Address: This variable-length field represents an address associated with the probed interface. If the address field would not otherwise terminate on a 32-bit boundary, it MUST be padded withzeros.zeroes. 3. ICMP Extended Echo Reply The ICMP Extended Echo Reply message is defined for both ICMPv4 and ICMPv6. Like any ICMP message, the ICMP Extended Echo Reply message is encapsulated in an IP header. The ICMPv4 version of the Extended Echo Reply message is encapsulated in an IPv4 header, while the ICMPv6 version is encapsulated in an IPv6 header. Figure 3 depicts the ICMP Extended Echo Reply message. 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Code | Checksum | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Identifier |Sequence Number|State|Res|A|4|6| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 3: ICMPExtenedExtended Echo Reply Message IP Header fields: o Sourceaddress:Address: Copied from the Destination Address field of the invoking Extended Echo Requestmessagemessage. o Destinationaddress:Address: Copied from the Source Address field of the invoking Extended Echo Requestmessagemessage. ICMP fields: o Type: Extended Echo Reply. The value for ICMPv4 isTTT3. <RFC Editor: Please replace TTT3 with the ICMPv4 type number for Extended Echo Reply>.43. The value for ICMPv6 isTTT4. <RFC Editor: Please replace TTT4 with the ICMPv6 type number for Extended Echo Reply>.161. o Code: Values are (0) No Error, (1) Malformed Query, (2) No Such Interface, (3) No Such Table Entry, and (4) Multiple Interfaces SatisfyQueryQuery. o Checksum: For ICMPv4, see RFC 792. For ICMPv6, see RFC44434443. o Identifier: Copied from the Identifier field of the invoking Extended Echo Requestpacketpacket. o Sequence Number: Copied from the Sequence Number field of the invoking Extended Echo Requestpacketpacket. oState -State: If Code is not equal to 0, this field MUST be set to 0 and ignored upon receipt. Likewise, if the probed interface resides upon the proxy node, this field MUST be set to 0 and ignored upon receipt. Otherwise, this field reflects the state of the ARPTabletable or Neighbor Cache entry associated with the probed interface. Values are (0)ReservedReserved, (1)IncompleteIncomplete, (2)ReachableReachable, (3)StaleStale, (4)DelayDelay, (5)ProbeProbe, and (6)FailedFailed. oRes -Res: This field MUST be set to 0 and ignored upon receipt. o A(Active) -(Active): The A-bit is set if the Code is equal tozero,0, the probed interface resides on the proxy node, and the probed interface is active. Otherwise, the A-bit is clear. o 4(IPv4) -(IPv4): The 4-bit is set if the A-bit is also set and IPv4 is running on the probed interface. Otherwise, the 4-bit is clear. o 6(IPv6) -(IPv6): The 6-bit is set if the A-bit is also set and IPv6 is running on the probed interface. Otherwise, the 6-bit is clear. 4. ICMP Message Processing When a node receives an ICMP Extended Echo Request message and any of the following conditions apply, the node MUST silently discard the incoming message: o The node does not recognize ICMP Extended Echo Requestmessagesmessages. o The node has not explicitly enabled ICMP Extended Echofunctionalityfunctionality. o The incoming ICMP Extend Echo Request carries asource addressSource Address that is not explicitly authorized for the L-bit setting of the incoming ICMP Extended EchoRequest L-bit settingRequest. o The incoming ICMP Extend Echo Request carries asource addressSource Address that is not explicitly authorized for the incoming ICMP Extended Echo Request type (i.e., by ifName, by IfIndex, or byAddress)Address). o The Source Address of the incomingmessagesmessage is not a unicastaddressaddress. o The Destination Address of the incoming message is a multicast address. Otherwise, when a node receives an ICMPv4 Extended Echo Request, it MUST format an ICMP Extended Echo Reply as follows: o Don't Fragmentflag(DF) flag is 1 o More Fragments flag is 0 o Fragment Offset is 0 o TTL is 255 o Protocol is ICMP When a node receives an ICMPv6 Extended Echo Request, it MUST format an ICMPv6 Extended Echo Reply as follows: o Hop Limit is 255 o Next Header is ICMPv6 In either case, the responding nodeMUST:MUST do the following: o Copy thesource addressSource Address from the Extended Echo Request message to thedestination addressDestination Address of the Extended EchoReplyReply. o Copy thedestination addressDestination Address from the Extended Echo Request message to thesource addressSource Address of the Extended EchoReplyReply. o Set the DiffServ codepoint to CS0[RFC4594][RFC4594]. o Set the ICMP Type to Extended EchoReplyReply. o Copy the Identifier from the Extended Echo Request message to the Extended EchoReplyReply. o Copy the Sequence Number from the Extended Echo Request message to the Extended EchoReplyReply. o Set the Code field as described in Section4.14.1. o Set the State field to 0. o Clear the A-bit, the4-bit4-bit, and the 6-bit. o If (1) the Code Field is equal to (0) NoError andError, (2) the L-bit issetset, and (3) the probed interface is active, set the A-bit.AlsoAlso, set the 4-bit and the 6-bit as appropriate. o If the CodeFieldfield is equal to (0) No Error and the L-bit is clear, then set the State field to reflect the state of the ARPTabletable or Neighbor Cache entry that represents the probed interface. o Set thechecksum appropriatelyChecksum appropriately. o Forward the ICMP Extended Echo Reply to itsdestinationdestination. 4.1. Code Field Processing The Code field MUST be set to (1) Malformed Query if any of the following conditions apply: o The ICMP Extended Echo Request does not include an ICMP ExtensionStructureStructure. o The ICMP Extension Structure does not include exactly one Interface IdentificationObjectObject. o The L-bit is clear and the Interface Identification Object identifies the probed interface by ifName orifIndexifIndex. o The query is otherwisemalformedmalformed. The Code field MUST be set to (2) No Such Interface if the L-bit is set and the ICMP Extension Structure does not identify an interface that resides on the proxy node. The Code field MUST be set to (3) No Such Table Entry if the L-bit is clear and the address found in the Interface Identification Object does not appear in the IPv4 Address Resolution Protocol (ARP)Tabletable or the IPv6 Neighbor Cache. The Code field MUST be set to (4) Multiple Interfaces Satisfy Query if any of the following conditions apply: o The L-bit is set and the ICMP Extension Structure identifies more than one interface that resides in the proxynodenode. o The L-bit is clear and the address found in the Interface Identification Object maps to multiple IPv4 ARP or IPv6 Neighbor Cacheentriesentries. Otherwise, the Code field MUST be set to (0) NoErrorError. 5.Use-CasesUse Cases In the scenarios listed below, network operators can use PROBE to determine the status of a probedinterface,interface but cannot use PING for the same purpose. In all scenarios, assume bidirectional connectivity between the probing and proxy interfaces. However, bidirectional connectivity between the probing and probed interfaces is lacking. o The probed interface isunnumberedunnumbered. o The probing and probed interfaces are not directly connected to one another. The probed interface has an IPv6 link-localaddress,address but does not have a more globally scopedaddressaddress. o The probing interface runs IPv4 only while the probed interface runs IPv6onlyonly. o The probing interface runs IPv6 only while the probed interface runs IPv4onlyonly. o For lack of a route, the probing node cannot reach the probed interface. 6. Updates to RFC 4884 Section 4.6 ofRFC 4884[RFC4884] provides a list of extensible ICMP messages (i.e., messages that can carry the ICMP Extension Structure). This document adds the ICMP Extended Echo Request message and the ICMP Extended Echo Reply message to that list. 7. IANA ConsiderationsThis document requestsIANA has performed the followingactions from IANA:actions: oAdd an entryAdded the following to the "ICMP TypeNumber" registry, representingNumbers" registry: 42 Extended Echo Request Added the following to the "Type 42 - Extended EchoRequest. This entry has one codeRequest" subregistry: (0) NoError.Error oAdd an entryAdded the following to the "ICMPv6"type"'type' Numbers"registry, representing theregistry: 160 Extended EchoRequest. This entry has one code (0) No Error.Request As ICMPv6 distinguishes between informational and error messages, and this is an informational message, the valuemust behas been assigned from the range 128-255. Added the following to the "Type 160 - Extended Echo Request" subregistry: (0) No Error oAdd an entryAdded the following to the "ICMP TypeNumber" registry, representing theNumbers" registry: 43 Extended EchoReply. This entry hasReply Added the followingcodes:to the "Type 43 - Extended Echo Reply" subregistry: (0) NoError,Error (1) MalformedQuery,Query (2) No SuchInterface,Interface (3) No Such TableEntry,Entry (4) Multiple Interfaces SatisfyQuery.Query oAdd an entryAdded the following to the "ICMPv6"type"'type' Numbers"registry, representing theregistry: 161 Extended EchoReply. This entryReply As ICMPv6 distinguishes between informational and error messages, and this is an informational message, the value has been assigned from the range 128-255. Added the followingcodes:to the "Type 161 - Extended Echo Reply" subregistry: (0) NoError,Error (1) MalformedQuery,Query (2) No SuchInterface,Interface (3) No Such TableEntry,Entry (4) Multiple Interfaces SatisfyQuery.Query oAdd an entryAdded the following to the "ICMP Extension Object Classes and ClassSub- types" registry, representing theSub-types" registry: (3) Interface IdentificationObject. It hasObject Added the following C-types to the "Sub-types - Class 3 - Interface Identification Object" subregistry: (0) Reserved(0),(1) Identifies InterfaceByby Name(1),(2) Identifies InterfaceByby Index(2),(3) Identifies InterfaceByby Address(3).C-Type values areassignableassigned on afirst-come-first-serveFirst Come First Serve (FCFS) basis with a range of 0-255. All codes mentioned above are assigned ona First Come First Serve (FCFS)an FCFS basis with a range of0 -255.0-255. 8. Security Considerations The following are legitimate uses of PROBE: o to determine the operational status of aninterfaceinterface. o to determine which protocols (e.g.,IPv4,IPv4 or IPv6) are active on aninterfaceinterface. However, malicious parties can use PROBE to obtain additional information. For example, a malicious party can use PROBE to discover interface names. Having discovered an interface name, the malicious party may be able to infer additional information. Additional information may include: o interface bandwidth o the type of device that supports the interface (e.g., vendor identity) o the operating system version that the above-mentioned device executes Understanding this risk, network operators establish policies that restrict access to ICMP Extended Echo functionality. In order to enforce thesepolices,policies, nodes that support ICMP Extended Echo functionality MUST support the following configuration options: o Enable/disable ICMP Extended Echo functionality. By default, ICMP Extend Echo functionality is disabled. o Define enabled L-bit settings. By default,L-bitthe option to set the L-bit is enabled andL-bitthe option to clear the L-bit is disabled. o Define enabled query types (i.e., by name, by index, or by address); byaddress). Bydefault, all query types are disabled. o For each enabled query type, define the prefixes from which ICMP Extended Echo Request messages arepermittedpermitted. o For each interface, determine whether ICMP Echo Request messages areacceptedaccepted. When a node receives an ICMP Extended Echo Request message that it is not configured to support, it MUST silently discard the message. See Section 4 for details. PROBE must not leak information about one Virtual Private Network (VPN) into another. Therefore, when a node receives an ICMP Extended Echo Request and the proxy interface is in a different VPN than the probed interface, the node MUST return an ICMP Extended Echo Reply with error code equal to (2) No Such Interface. In order to protect local resources, implementations SHOULD rate- limit incoming ICMP Extended Echo Request messages. 9. References 9.1. Normative References [RFC0792] Postel, J., "Internet Control Message Protocol", STD 5, RFC 792, DOI 10.17487/RFC0792, September 1981, <https://www.rfc-editor.org/info/rfc792>. [RFC0826] Plummer, D., "Ethernet Address Resolution Protocol: Or Converting Network Protocol Addresses to 48.bit Ethernet Address for Transmission on Ethernet Hardware", STD 37, RFC 826, DOI 10.17487/RFC0826, November 1982, <https://www.rfc-editor.org/info/rfc826>. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, <https://www.rfc-editor.org/info/rfc2119>. [RFC4443] Conta, A., Deering, S., and M. Gupta, Ed., "Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification", STD 89, RFC 4443, DOI 10.17487/RFC4443, March 2006, <https://www.rfc-editor.org/info/rfc4443>. [RFC4861] Narten, T., Nordmark, E., Simpson, W., and H. Soliman, "Neighbor Discovery for IP version 6 (IPv6)", RFC 4861, DOI 10.17487/RFC4861, September 2007, <https://www.rfc-editor.org/info/rfc4861>. [RFC4884] Bonica, R., Gan, D., Tappan, D., and C. Pignataro, "Extended ICMP to Support Multi-Part Messages", RFC 4884, DOI 10.17487/RFC4884, April 2007, <https://www.rfc-editor.org/info/rfc4884>. [RFC7223] Bjorklund, M., "A YANG Data Model for Interface Management", RFC 7223, DOI 10.17487/RFC7223, May 2014, <https://www.rfc-editor.org/info/rfc7223>. [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, <https://www.rfc-editor.org/info/rfc8174>. 9.2. Informative References [RFC2151] Kessler, G. and S. Shepard, "A Primer On Internet and TCP/ IP Tools and Utilities", FYI 30, RFC 2151, DOI 10.17487/RFC2151, June 1997, <https://www.rfc-editor.org/info/rfc2151>. [RFC4594] Babiarz, J., Chan, K., and F. Baker, "Configuration Guidelines for DiffServ Service Classes", RFC 4594, DOI 10.17487/RFC4594, August 2006, <https://www.rfc-editor.org/info/rfc4594>. Appendix A. The PROBE Application The PROBE application accepts input parameters, sets acountercounter, and enters a loop to be exited when the counter is equal tozero.0. On each iteration of the loop, PROBE emits an ICMP Extended Echo Request, decrements the counter, sets atimertimer, and waits. The ICMP Extended Echo Request includes an Identifier and a Sequence Number. If an ICMP Extended Echo Reply carrying the same Identifier and Sequence Number arrives, PROBE relays information returned by that message to its user. However, on each iteration of the loop, PROBE waits for the timer toexpire,expire regardless of whether an Extended Echo Reply message arrives. PROBE accepts the following parameters: o Count o Wait o Probing Interface Address o Hop Count o Proxy Interface Address o Local o Probed Interface Identifier Count is a positive integer whose default value is 3. Count determines the number of times that PROBE iterates through the above- mentioned loop. Wait is a positive integer whose minimum and default values are 1. Wait determines the duration of the above-mentioned timer, measured in seconds. Probing Interface Address specifies thesource addressSource Address of the ICMP Extended Echo Request. The Probing Interface Address MUST be a unicast address and MUST identify an interface that resides on the probing node. The Proxy Interface Address identifies the interface to which the ICMP Extended Echo Request message is sent. Itcanmust be an IPv4 or IPv6 unicast address. If it is an IPv4 address, PROBE emits an ICMPv4 message. If it is an IPv6 address, PROBE emits an ICMPv6 message. Local is a boolean value. It is TRUE if the proxy and probed interfaces both reside on the same node. Otherwise, it is FALSE. The Probed Interface Identifier identifies the probed interface. It is one of the following: o an interfacenamename; o an address from any address family (e.g., IPv4, IPv6, IEEE 802, 48-bit MAC, or 64-bitMAC)MAC); or o anif-indexif-index. If the Probed Interface Identifier is an address, it does not need to be of the same address family as the proxy interface address. For example, PROBE accepts an IPv4 Proxy Interface Address and an IPv6 Probed InterfaceIdentifierIdentifier. Acknowledgments Thanks to Sowmini Varadhan, Jeff Haas, Carlos Pignataro, Jonathan Looney, Dave Thaler, Mikio Hara, Joel Halpern, Yaron Sheffer, Stefan Winter, Jean-Michel Combes, AmandaBarberBarber, and Joe Touch for their thoughtful review of this document. Authors' Addresses Ron Bonica Juniper Networks 2251 Corporate Park Drive Herndon, Virginia 20171USAUnited States of America Email: rbonica@juniper.net Reji Thomas Juniper Networks Elnath-Exora Business Park Survey Bangalore, Karnataka 560103 India Email: rejithomas@juniper.net Jen Linkova Google 1600 Amphitheatre Parkway Mountain View, California 94043USAUnited States of America Email: furry@google.com Chris Lenart Verizon 22001 Loudoun County Parkway Ashburn, Virginia 20147USAUnited States of America Email: chris.lenart@verizon.com Mohamed Boucadair Orange Rennes 35000 France Email: mohamed.boucadair@orange.com