Securing network bootstrapping infrastructures

In a scaled SDN network, certificate-based authentication and key distribution are a challenge. The OpenDaylight SNBI project provides a zero-touch approach to securely establishing communication between the network device and OpenDaylight as an SDN controller. Any network device that leverages the IEEE 802.1AR - 2009 standard for secure device identification can securely bootstrap the communication with OpenDaylight. OpenDaylight and network devices will automatically discover each other and then get the IP address assigned to each other, exchange key certificates, and finally establish secure IP connectivity.

Getting ready

For this recipe, you need three Ubuntu 14.04 hosts, OpenDaylight distribution, docker, an snbi/beryllium docker image, PostMan as a REST API client, and Vagrant if you use the predefined Vagrant file in our recipe folder. In this recipe, you will learn how to use OpenDaylight to establish a secure bootstrap communication with...