MIME-Version: 1.0
In-Reply-To: <551437E7.9030406@auckland.ac.nz>
References: <551437E7.9030406@auckland.ac.nz>
Date: Thu, 26 Mar 2015 14:15:37 -0400
Message-ID: <CAG4d1rcB0qp0yiLNCTvQmhqvgWFSvSUDfVGCDe6F0MQGzwQ==w@mail.gmail.com>
From: Alia Atlas <akatlas@gmail.com>
To: Nevil Brownlee <n.brownlee@auckland.ac.nz>
Content-Type: multipart/alternative; boundary=001a1140b232ada8f70512350096
Resent-To: draft-ietf-isis-extended-sequence-no-tlv.all@ietf.org
Resent-Message-Id: <20150326181545.D20381A9074@ietfa.amsl.com>
Resent-Date: Thu, 26 Mar 2015 11:15:45 -0700 (PDT)
Resent-From: akatlas@gmail.com
Archived-At: <http://mailarchive.ietf.org/arch/msg/draft-ietf-isis-extended-sequence-no-tlv.all@tools/SixJUdcKQjqP-YsDCmYjoL4MJrE>
Archived-At: <http://mailarchive.ietf.org/arch/msg/isis-wg/9fL0g5sVXX39DSW-DS7x0BogAms>
Cc: "ops-dir@ietf.org" <ops-dir@ietf.org>,
 draft-ietf-isis-extended-sequence-no-tlv.all@tools.ietf.org
Subject: Re: [Isis-wg] Review of draft-ietf-isis-extended-sequence-no-tlv-04
Precedence: list

--001a1140b232ada8f70512350096
Content-Type: text/plain; charset=UTF-8

Nevil,

Thanks very much for the review.

Alia

On Thu, Mar 26, 2015 at 12:46 PM, Nevil Brownlee <n.brownlee@auckland.ac.nz>
wrote:

>
> Hi all:
>
> I have reviewed this document as part of the Operational directorate's
> ongoing effort to review all IETF documents being processed by the
> IESG.  These comments were written primarily for the benefit of the
> operational area directors.  Document editors and WG chairs should
> treat these comments just like any other last call comments.
>
> Overall, it seems fine to me.
>
> Abstract:
>   "This document defines Extended Sequence number TLV to protect
>    Intermediate System to Intermediate System (IS-IS) PDUs from replay
>    attacks."
>
> Draft addresses Security concerns raised by the use of IS-IS in
> Data Centre environments, and by the use of SDN in Data Centres.
>
> "This document defines Extended Sequence number (ESN) TLV to protect
> Intermediate System to Intermediate System (IS-IS) PDUs from replay
> attacks."
>
> I presume that the ESSN will be given a random (but non-zero) when the
> router boots up, then increments from there?  This is covered in
> detail in Appendix A, but perhaps a forward reference to that in
> section 3 would be helpful.
>
> Section 5 on Backward Compatibility and Deployment seems clear
> to me, and should help Operators to use this new feature.
>
> Cheers, Nevil
> Co-chair, EMAN WG
>
> --
> ---------------------------------------------------------------------
>  Nevil Brownlee                    Computer Science Department | ITS
>  Phone: +64 9 373 7599 x88941             The University of Auckland
>  FAX: +64 9 373 7453   Private Bag 92019, Auckland 1142, New Zealand
>

--001a1140b232ada8f70512350096
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Nevil,<div><br></div><div>Thanks very much for the review.=
</div><div><br></div><div>Alia</div></div><div class=3D"gmail_extra"><br><d=
iv class=3D"gmail_quote">On Thu, Mar 26, 2015 at 12:46 PM, Nevil Brownlee <=
span dir=3D"ltr">&lt;<a href=3D"mailto:n.brownlee@auckland.ac.nz" target=3D=
"_blank">n.brownlee@auckland.ac.nz</a>&gt;</span> wrote:<br><blockquote cla=
ss=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pa=
dding-left:1ex"><br>
Hi all:<br>
<br>
I have reviewed this document as part of the Operational directorate&#39;s<=
br>
ongoing effort to review all IETF documents being processed by the<br>
IESG.=C2=A0 These comments were written primarily for the benefit of the<br=
>
operational area directors.=C2=A0 Document editors and WG chairs should<br>
treat these comments just like any other last call comments.<br>
<br>
Overall, it seems fine to me.<br>
<br>
Abstract:<br>
=C2=A0 &quot;This document defines Extended Sequence number TLV to protect<=
br>
=C2=A0 =C2=A0Intermediate System to Intermediate System (IS-IS) PDUs from r=
eplay<br>
=C2=A0 =C2=A0attacks.&quot;<br>
<br>
Draft addresses Security concerns raised by the use of IS-IS in<br>
Data Centre environments, and by the use of SDN in Data Centres.<br>
<br>
&quot;This document defines Extended Sequence number (ESN) TLV to protect<b=
r>
Intermediate System to Intermediate System (IS-IS) PDUs from replay<br>
attacks.&quot;<br>
<br>
I presume that the ESSN will be given a random (but non-zero) when the<br>
router boots up, then increments from there?=C2=A0 This is covered in<br>
detail in Appendix A, but perhaps a forward reference to that in<br>
section 3 would be helpful.<br>
<br>
Section 5 on Backward Compatibility and Deployment seems clear<br>
to me, and should help Operators to use this new feature.<br>
<br>
Cheers, Nevil<br>
Co-chair, EMAN WG<span class=3D"HOEnZb"><font color=3D"#888888"><br>
<br>
-- <br>
------------------------------<u></u>------------------------------<u></u>-=
--------<br>
=C2=A0Nevil Brownlee=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 Computer Science Department | ITS<br>
=C2=A0Phone: <a href=3D"tel:%2B64%209%20373%207599%20x88941" value=3D"+6493=
737599" target=3D"_blank">+64 9 373 7599 x88941</a>=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0The University of Auckland<br>
=C2=A0FAX: <a href=3D"tel:%2B64%209%20373%207453" value=3D"+6493737453" tar=
get=3D"_blank">+64 9 373 7453</a>=C2=A0 =C2=A0Private Bag 92019, Auckland 1=
142, New Zealand<br>
</font></span></blockquote></div><br></div>

--001a1140b232ada8f70512350096--