1. Scope and Purpose
ISO/IEC 11587-01, also adopted as CAN/CSA-ISO/IEC 11587-01, defines the protocol specification for providing the Connectionless-Mode Network Service (CLNS). This international standard belongs to the Open Systems Interconnection (OSI) protocol suite and is crucial for the network layer (Layer 3) communication where no prior connection setup is required.
The standard specifies the procedures, formats, and protocols for transferring data and control information between network entities in a connectionless manner. It covers the exchange of protocol data units (PDUs) without establishing a logical connection, suitable for applications that tolerate occasional loss but require minimal overhead, such as datagram-based services.
Key objectives of ISO/IEC 11587-01 include:
- Defining the exact structure and semantics of network layer PDUs for connectionless operation.
- Specifying the procedures for encapsulation, segmentation, reassembly, and error detection.
- Ensuring interoperability between implementations across different systems and vendors.
- Providing a stable reference for conformance testing and performance benchmarking.
Tip: ISO/IEC 11587-01 is often used in conjunction with ISO/IEC 8348 (Network Service Definition) and ISO/IEC 8208 (X.25 Packet Layer Protocol) to build complete network layer solutions in OSI environments.
2. Technical Requirements and Protocol Specification
2.1 Protocol Data Unit (PDU) Structure
The core of ISO/IEC 11587-01 is the definition of the CLNS Protocol Data Unit (CLNP). The CLNP header is designed to be flexible and extensible. Its fixed part is eight octets long, followed by optional parts as needed.
| Octet Offset | Field | Length (octets) | Description |
| 0 | Version/Protocol ID | 1 | Identifies the protocol version (e.g., 0x81 for CLNP). |
| 1 | Length Indicator | 1 | Total length of the header in octets (including fixed and optional parts). |
| 2 | Version (again for compatibility) | 1 | Duplicate of first octet for robustness. |
| 3 | Lifetime | 1 | Time-to-live in units of 500 ms (max 255). |
| 4–5 | Checksum | 2 | Header checksum covering the entire header (optional but typical). |
| 6–7 | Segment Offset | 2 | Used for fragmentation; indicates position of this PDU in the original datagram. |
| 8–end | Options | Variable | Including source/destination addresses (NSAPs), quality of service parameters, security, and others. |
Other essential PDU types defined include Error Report PDUs (ERPDU) and Echo Request/Reply PDUs for diagnostic purposes.
2.2 Procedural Elements
The standard defines a set of procedures for the following:
- Unit Data Transfer: Forwarding of data from a source to a destination without acknowledgment.
- Segmentation and Reassembly: Splitting large datagrams into smaller PDUs and reassembling them at the destination.
- Error Handling: Detection of header errors, lifetime expiration, and generation of error reports when necessary.
- Duplicate Detection and Discard: Mechanisms to mitigate duplicate PDUs (optional but recommended).
- Quality of Service (QoS) Negotiation: Conveying transit delay, cost, and reliability parameters via option fields.
Warning: Because the CLNS protocol is connectionless, upper-layer services must provide their own retransmission and error recovery if required. The network layer does not guarantee delivery or sequencing.
3. Implementation Highlights
Implementing ISO/IEC 11587-01 requires careful attention to protocol state machines and memory management. Key implementation aspects include:
- Address Resolution: Use of Network Service Access Point (NSAP) addresses, which can be up to 20 octets long. Proper encoding and decoding routines are essential.
- Buffer Management: Handling variable header lengths (up to 254 octets) and possible large data payloads necessitates dynamic allocation.
- Checksum Computation: The standard recommends but does not mandate the use of the checksum. Implementations that omit it must ensure other layers compensate.
- Conformance to API: The service interface must match the abstract service primitives defined in ISO/IEC 8348.
Best Practice: Use a modular design that separates PDU encoding/decoding from the forwarding logic. This eases validation and simplifies future upgrades or multi-protocol support.
4. Compliance Notes
4.1 Conformance Testing
To claim conformance with ISO/IEC 11587-01, implementations must pass a suite of tests defined in the companion standard ISO/IEC 8881 (Conformance testing for the network layer). These tests verify:
- Correct behavior of all PDU types.
- Proper segmentation and reassembly.
- Error detection and response.
- Lifetime handling.
4.2 Adoption Context
As an international standard, ISO/IEC 11587 has been adopted by many national bodies. The Canadian adoption CAN/CSA-ISO/IEC 11587-01 is identical to the ISO/IEC text. This standard is part of the OSI protocol stack, which has largely been superseded by TCP/IP in general-purpose networking. However, it remains relevant in specialized fields such as avionics (ARINC 664), industrial automation, and telecommunication infrastructure where deterministic behavior and strict layering are required.
4.3 Certification and Interoperability
Products claiming compliance should undergo independent testing in accredited laboratories. Interoperability events among vendors are recommended to validate real-world behavior. The standard does not forbid extensions, but they must be declared and should not break compatibility.
Critical: Do not assume that CLNS implementations from different vendors will interoperate without rigorous testing. The optional nature of many fields and features can cause inconsistencies.
Q: Is ISO/IEC 11587-01 still relevant today?
A: While TCP/IP dominates most networks, ISO/IEC 11587-01 remains essential in legacy systems, industrial control, and certain aerospace applications that rely on the OSI model for precise service definitions and deterministic behavior.
Q: How does this standard relate to ISO/IEC 8473?
A: ISO/IEC 11587-01 is actually a former designation; the current consolidated standard for the Connectionless Network Protocol (CLNP) is ISO/IEC 8473-1. The content is technically aligned, but 11587-01 specifically refers to the earlier version adopted by Canada.
Q: What NSAP addressing scheme is used?
A: The standard uses Network Service Access Point (NSAP) addresses as defined in ISO/IEC 8348. These can be up to 20 octets long and include an authority and format identifier, initial domain part, and domain-specific part.
Q: Can ISO/IEC 11587-01 be used over IP networks?
A: Yes, CLNP can be tunneled over IP using techniques like Generic Routing Encapsulation (GRE). This allows legacy OSI applications to operate over modern IP infrastructure.
Published: January 2026. This article is for informational purposes and does not replace the official text of the standard. For authoritative compliance, refer to the latest edition of ISO/IEC 11587-01 or its national adoption.