NSSA summarization

[Ajay Thakur <[e-mail]>]

Hi all,
I have some more queries in OSPF  - NSSA area.

Suppose I am summarizing type-7 LSAs.  In this case while generating 
type-5 lsa we follow section 4.1 of rfc 1587,

e.g.
1>  If none of the LSA's  LS-Id matches to my summary-address range but 
LS-Id falls under configured summary address range, then we generate 
type-5 as per  rfc 1587 -section 4.1 (2)
and

2> If my LSA has LS-Id equal to summary address range then  we  generate 
type-5 lsa as per rfc 1587 section-4.1(1)

Now my question is ,
What happens if ospf database has one LSA with LS-Id matches to my 
summary-address range and some LSAs with LS-Id falling under 
summary-address range.  Then in this case what type of metric or 
path-type we should set in the type-5 lsa?
Need your help,
Thanks,
with regards
ajay




Vishwas Manral wrote:

>Hi Acee,
>
>  
>
>>Acee: In practice, for OSPFv2 the sequence numbers are not monotically
>>increasing; Usage of router's clock for cryptographic sequence number 
>>generation reduces the chance for replay attacks across restarts. 
>>?: OSPF spec does not say it ...
>>    
>>
>Acee, what I meant was that although the OSPF spec does not state that
>we need to use clocks. 
>
>I think the vulnerabilities draft is the right place to state the
>problems that can happen if we do not use a clock (or something
>equivalent which increments even when a system goes down).
>
>Another issue is that even if the sender uses clock for the "sequence
>number" and goes down, all the packets of a previous session can still
>be replayed by another router. So the chance of replay attacks is still
>there.
>
>Thanks,
>Vishwas
>-----Original Message-----
>From: Mailing List [mailto:[e-mail]] On Behalf Of Acee
>Lindem
>Sent: Monday, August 15, 2005 7:50 PM
>To: [e-mail]
>Subject: OSPF WG Minutes
>
>Attached are the minutes from the Paris OSPF WG meeting. Thanks to
>Dimitri for taking them.
>
>Acee
>
>  
>