ietf-corpus

rfc-6427

MPLS Fault Management Operations, Administration, and Maintenance (OAM)

G. Swallow (Editor), A. Fulignoli (Editor), M. Vigoureux (Editor), S. Boutros, D. Ward
date2011-11 streamIETF areartg wgmpls statusPROPOSED STANDARD pages17 canonicalhttps://www.rfc-editor.org/rfc/rfc6427 doi10.17487/RFC6427
This document specifies Operations, Administration, and Maintenance (OAM) messages to indicate service disruptive conditions for MPLS-based transport network Label Switched Paths. The notification mechanism employs a generic method for a service disruptive condition to be communicated to a Maintenance Entity Group End Point. This document defines an MPLS OAM channel, along with messages to communicate various types of service disruptive conditions. [STANDARDS-TRACK]

updated by

Extracted elements (28)

design-rationale §1

Fault Management OAM suppresses alarm storms by informing client MEPs of server-layer failures before the client detects a loss of continuity, allowing operations to focus on the actual faulty elements rather than cascading alarms from dependent layers.

mpls

design-rationale §5.2

The clearing mechanism uses a 3.5× Refresh Timer expiration as a passive clearing method, with an active R-Flag procedure for faster clearing. The two-method design accommodates both normal fade-out and explicit notification without requiring the receiver to track sender state beyond the timer.

mpls

design-rationale §2.3

The L-Flag is not automatically propagated in hierarchical LSP scenarios, and the server-failure determination rules of Section 2.1.1 must be re-applied at each layer. This prevents premature triggering of protection switching at higher layers during transient conditions.

mpls

normative-requirement §2.1.1 MUST

A node MUST NOT set the L-Flag until the fault has been determined to be a server-failure. A node MUST set the L-Flag if the fault has been determined to be a server-failure. During a server layer protection switching event, the L-Flag MUST NOT be set.

mpls

normative-requirement §2.3 SHOULD

If the CC function is disabled for the server LSP, a node SHOULD generate AIS messages toward any clients when either the AIS or LKR indication is raised. The L-Flag is not automatically propagated during hierarchical propagation.

mpls

normative-requirement §5.1 MUST

If the R-Flag clearing procedures are to be used, the IF_ID TLV MUST be included in the FM message. After initial transmission, the message MUST be retransmitted two more times at one-second intervals, then further retransmissions follow the Refresh Timer value.

mpls

normative-requirement §6 MUST

Minimum implementation MUST support: sending AIS and LKR messages at one per second, setting the L-Flag to indicate server-failure, and receiving AIS and LKR messages with any allowed Refresh Timer value.

mpls

normative-requirement §2.1 SHOULD

The AIS message SHOULD be sent as soon as the fault condition is detected, but MAY be delayed due to processing, and MAY be suppressed if protection is achieved very rapidly.

mpls

normative-requirement §5.1 MUST NOT

The Refresh Timer value MUST NOT be changed on successive FM messages reporting the same incident. If optional clearing procedures are not used, the default is one second; otherwise the default is 20 seconds.

mpls

normative-requirement §5.2 MUST

When a fault is cleared, a node MUST cease sending the associated FM messages. To clear more quickly, the R-Flag is set to 1, the message is sent immediately and retransmitted two more times at one-second intervals. If a new fault occurs, the node MUST cease these retransmissions and generate new FM messages.

mpls

protocol-element §2

Fault Management messages are carried in-band of the client LSP or MS-PW using the Associated Channel Header (ACH). For LSPs other than PWs, the ACH is identified by the Generic Associated Channel Label (GAL) as defined in RFC 5586.

mpls

protocol-element §2

Fault OAM messages are generated by intermediate nodes where a client LSP is switched. When a server sub-layer fails, the intermediate node sends Fault Management messages downstream towards the LSP end point and retransmits them periodically until the condition is cleared.

mpls

protocol-element §2.1.1

The Link Down Indication (LDI) is communicated by setting the L-Flag to 1 in an AIS message. Receipt of an AIS with L-Flag set MAY be treated as equivalent to Loss of Continuity (LOC) at the client layer; the choice depends on the rate at which Continuity Check is running.

mpls

protocol-element §4

The Refresh Timer field specifies the maximum time in seconds between successive FM messages. The range is 1 to 20 seconds; the value 0 is not permitted.

mpls

protocol-element §2

Two messages are defined to communicate service disruptive conditions: Alarm Indication Signal (AIS), sent in response to detecting faults in the server sub-layer, and Lock Report (LKR), generated when a server sub-layer entity has been administratively locked.

mpls

registry §8.1

IANA assigned Associated Channel Type 0x0058 (Fault OAM, TLV Follows=No) from the Pseudowire Associated Channel Types registry for the MPLS Fault Management channel.

mpls, registry

registry §8.3

RFC 6427 creates the 'MPLS Fault OAM Flag Registry' (sub-registry of MPLS OAM Parameters) with 8 flag bits (0-7), all allocated by Standards Action. Defines: bit 6 (0x2)=L-Flag, bit 7 (0x1)=R-Flag; bits 0-5 unassigned.

mpls, registry

registry §8.2

RFC 6427 creates the 'MPLS Fault OAM Message Type Registry' (sub-registry of MPLS OAM Parameters). Values 0-251 via Standards Action; 252-255 Experimental Use (MUST NOT be allocated). Defines: 0=Reserved, 1=AIS, 2=LKR.

mpls, registry

registry §8.4

RFC 6427 creates the 'MPLS Fault OAM TLV Registry' (sub-registry of MPLS OAM Parameters). Values 0-191 via Standards Action; 192-247 via Specification Required; 248-255 Experimental Use (MUST NOT be allocated). Defines: 0=Reserved, 1=Interface Identifier TLV, 2=Global Identifier.

mpls, registry

security-consideration §7 SHOULD

If external MPLS traffic is mapped to an LSP via a PHP forwarding operation, it is possible to insert a GAL followed by a fault OAM message. An operator SHOULD protect against this by filtering fault OAM messages with the GAL at the top of the label stack.

mpls, security

security-consideration §7

Spurious fault OAM messages form a denial-of-service vector that can suppress alarms falsely. Because these messages are in a control channel, an attacker must subvert a transit node to inject them; transport networks operated as walled gardens reduce this risk.

mpls, security

security-consideration §7 SHOULD NOT

The G-ACh can be used as a covert channel providing end-to-end connectivity that SHOULD NOT be policed by transit nodes, meaning there is no simple way to prevent traffic between consenting nodes from using this channel.

mpls, security

state-machine §5.3

On receiving an FM message with R-Flag=0: if no matching condition exists, enter the condition and set Expiration timer to 3.5 × Refresh Timer; if condition exists, treat as refresh and reset the timer. On R-Flag=1: clear the matching condition by message type and IF_ID. Expiration timer expiry clears the condition.

mpls

wire-format §4.1.1

Fault Management TLVs use an 8-bit Type, 8-bit Length, and variable-length Value field. The Interface Identifier TLV (Type=1, Length=0x8) carries an MPLS-TP Node Identifier (32 bits) and MPLS-TP Interface Number (32 bits) as defined in RFC 6370.

mpls

wire-format §4

The Fault Management message format contains: 4-bit Version (currently 1), 4-bit Reserved (MUST be zero), 8-bit Message Type, 8-bit Flags, 8-bit Refresh Timer (1-20 seconds, 0 not permitted), 8-bit Total TLV Length, followed by TLVs.

mpls

wire-format §4

The Flags field contains two defined bits: L-Flag (bit 6, hex 0x2) for Link Down Indication and R-Flag (bit 7, hex 0x1) to indicate removal of a previously sent FM condition. Reserved flags MUST be set to zero on transmission and ignored on receipt.

mpls

wire-format §4.1.2

The Global Identifier TLV (Type=2, Length=0x4) carries the 32-bit MPLS-TP Global Identifier as defined in RFC 6370.

mpls

wire-format §3

The MPLS Fault Management Channel is identified by ACH with Associated Channel Type 0x0058. The FM Channel MUST NOT include the ACh TLV header. The ACH consists of a 4-bit version prefix '0001', Version, Reserved, and the 0x0058 FM Channel code point in a 32-bit header.

mpls