RE: [PWE3] Secure MPLS based TDM PW

"Yaakov Stein" <yaakov_s@rad.com> Wed, 04 October 2006 08:15 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GV1uB-0007x0-4g; Wed, 04 Oct 2006 04:15:03 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GV1u9-0007v5-L5 for pwe3@ietf.org; Wed, 04 Oct 2006 04:15:01 -0400
Received: from mx1-012.rad.co.il ([212.199.240.8] helo=antivir1.rad.co.il) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GV1u5-0007GP-4n for pwe3@ietf.org; Wed, 04 Oct 2006 04:15:01 -0400
Received: from antivir1.rad.co.il (localhost [127.0.0.1]) by antivir1.rad.co.il (8.12.10/8.12.10) with ESMTP id k94881t8012986 for <pwe3@ietf.org>; Wed, 4 Oct 2006 10:08:01 +0200 (IST)
Received: from exrad3.ad.rad.co.il (exrad2 [192.114.24.112]) by antivir1.rad.co.il (8.12.10/8.12.10) with ESMTP id k94880Zf012983; Wed, 4 Oct 2006 10:08:00 +0200 (IST)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [PWE3] Secure MPLS based TDM PW
Date: Wed, 04 Oct 2006 10:14:31 +0200
Message-ID: <457D36D9D89B5B47BC06DA869B1C815D01E9B414@exrad3.ad.rad.co.il>
In-Reply-To: <4F9DBE266768DC46A1F17E875D37164118902402@ma8117exch002u.inse.lucent.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [PWE3] Secure MPLS based TDM PW
Thread-Index: AcbmLBfCM8StO4+fSTqw1FMOla4oIwBYMgSg
From: Yaakov Stein <yaakov_s@rad.com>
To: "Bapat, Swapna (Swapna)" <bapat@lucent.com>, pwe3@ietf.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 79899194edc4f33a41f49410777972f8
Cc:
X-BeenThere: pwe3@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Pseudo Wires Edge to Edge <pwe3.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/pwe3>, <mailto:pwe3-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:pwe3@ietf.org>
List-Help: <mailto:pwe3-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/pwe3>, <mailto:pwe3-request@ietf.org?subject=subscribe>
Errors-To: pwe3-bounces@ietf.org

 

I would like to understand if there is a consensus on securing payload
of MPLS based TDM PW.
One could argue that the PW is emulating a point to point circuit, so
why do we need encryption? but since the data traverses a packet
network, some providers have expressed a need for securing the PW
traffic.

Alternate suggestions are to use IP/UDP encapsulation so that IPSec can
be used. This approach makes us lose the benefits of MPLS traffic
engineering. 

Thoughts or suggestions?


[YJS] I intend presenting in San Diego an approach for accomplishing
this 
(hint: based on MACsec idea).  Also - see draft-stein-pwe3-sec-req.


_______________________________________________
pwe3 mailing list
pwe3@ietf.org
https://www1.ietf.org/mailman/listinfo/pwe3