[Isis-wg] draft-chunduri-isis-extended-sequence-no-tlv-00
Manav Bhatia <manav_bhatia06@yahoo.co.uk> Fri, 28 October 2011 00:18 UTC
Return-Path: <manav_bhatia06@yahoo.co.uk>
X-Original-To: isis-wg@ietfa.amsl.com
Delivered-To: isis-wg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A108911E8099 for <isis-wg@ietfa.amsl.com>; Thu, 27 Oct 2011 17:18:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level:
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lLqOn4GSH9dE for <isis-wg@ietfa.amsl.com>; Thu, 27 Oct 2011 17:18:34 -0700 (PDT)
Received: from nm23-vm9.bullet.mail.ukl.yahoo.com (nm23-vm9.bullet.mail.ukl.yahoo.com [217.146.176.155]) by ietfa.amsl.com (Postfix) with SMTP id B896B11E808F for <isis-wg@ietf.org>; Thu, 27 Oct 2011 17:18:33 -0700 (PDT)
Received: from [217.146.183.216] by nm23.bullet.mail.ukl.yahoo.com with NNFMP; 28 Oct 2011 00:18:29 -0000
Received: from [217.146.183.175] by tm9.bullet.mail.ukl.yahoo.com with NNFMP; 28 Oct 2011 00:18:29 -0000
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; 28 Oct 2011 00:18:29 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 514717.54936.bm@omp1016.mail.ukl.yahoo.com
Received: (qmail 50628 invoked by uid 60001); 28 Oct 2011 00:18:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1319761109; bh=o6fRr/CW7/r4evf+DK38cYuBaOXycNeWuhLQkZzad/k=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TXUuvxC0Y30i2N80Vn9VO5DKRg53r72I49YoVANcAhXy8qU9HnktzxLv/WIUTOMSC+TaOOBvdZ4IG2HGaG14T7Nj7roF5LILTsh1oQbI6IKJHeSVfwjGoRGpTN2G/Bu3dOCsObf4aWm6f6/SkhfV4wzj8giwqyPyraUv0fWFwdU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=I7gtSrg4TdfALabPNub4JCoVQ5raIweyDW3kbHoJD0CTwPwxCpMDiLgUkawFG+gFrRiBDY9eZmR+GKKSP90zQfObALluAXJNRE2f8b71XPdu/Oo6VQBHvC1pYESkLSBC29/T/XObhhXpShAhvf0r4LaSLOLfBxNyLSf3WRi0evk=;
X-YMail-OSG: ErVvHjYVM1kAqlqpOjCvUDybpSw1VyaAUhM7gvWq9akHfFm cD.OiVVUW2256eWgSvy_vTuXeWoIOP6Ybma2M1tguHAH.1S6SUrmPKedHdaL 0yKunP1vp0WcYJM0VtNQmeaEEMKkUI15rURqiHl04n1ByPOCfTzOqJzAf50i GrHx7ENVl5kZhXl1TWVvKZsGkBZ74r7uvjizxFyaQxr8_6akO4eEyUsUkL8S 8MBZC34ok7nAdHoZ2ZW3J2qNfzJYT5JSNC4BHG4R98wKD81X2O4nzkYN4klf U3p8n6LhSYBkQwMFgb8QdMap.G79tErXAnDLGCG7Jera7AS4sPMCsPJ259L9 _0jYGJrvQgKSKD8MZ2mC7poflunodmZy9bR1eOCfOXEu.hnccYlGvxn6Lefu DxYf..cVf.8ArHPkLNHa_ZbT3qzTD
Received: from [122.178.216.250] by web27406.mail.ukl.yahoo.com via HTTP; Fri, 28 Oct 2011 01:18:29 BST
X-Mailer: YahooMailWebService/0.8.115.325013
Message-ID: <1319761109.42505.YahooMailNeo@web27406.mail.ukl.yahoo.com>
Date: Fri, 28 Oct 2011 01:18:29 +0100
From: Manav Bhatia <manav_bhatia06@yahoo.co.uk>
To: isis <isis-wg@ietf.org>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1452884256-426562165-1319761109=:42505"
Subject: [Isis-wg] draft-chunduri-isis-extended-sequence-no-tlv-00
X-BeenThere: isis-wg@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Manav Bhatia <manav_bhatia06@yahoo.co.uk>
List-Id: IETF IS-IS working group <isis-wg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/isis-wg>
List-Post: <mailto:isis-wg@ietf.org>
List-Help: <mailto:isis-wg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/isis-wg>, <mailto:isis-wg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Oct 2011 00:18:34 -0000
Hi, We had considered adding support for replay protection when doing RFC 5310. The reason it was rejected was because we didnt think such an attack was really possible since (i) the attacker has to be on a direct link and (ii) ISIS is generally run in the service provider "core" router (you dont ever find it as a PE-CE protocol). So, i would first like to understand if something has changed between then and now to prompt a need for such a mechanism. OSPF is a different beast since OSPF packets can be launched from a site multiple hops away as they ride over IP - and adding mechanisms to prevent OSPF replays becomes significant. I would like to understand the motivation here. Cheers, Manav
- [Isis-wg] draft-chunduri-isis-extended-sequence-n… Manav Bhatia
- Re: [Isis-wg] draft-chunduri-isis-extended-sequen… Uma Chunduri
- Re: [Isis-wg] draft-chunduri-isis-extended-sequen… Manav Bhatia
- Re: [Isis-wg] draft-chunduri-isis-extended-sequen… Naiming Shen
- Re: [Isis-wg] draft-chunduri-isis-extended-sequen… Uma Chunduri