[secdir] SECDIR Review of http://tools.ietf.org/html/draft-ietf-v6ops-clatip-02

[Phillip Hallam-Baker <[e-mail]>]

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

The document is simply an assignment request for a reserved IP address
block for a scheme described in [RFC6333] and [RFC6877]. The block
previously assigned to DSLite is now assigned to related,
non-competing functions.

The document would be rather easier to make sense of if the start and
the end of the address range had been given.

192.0.0.0/29 is 192.0.0.0...192.0.0.7

This does not matter much because RFC6333 actually assigns specific
addresses for specific functions within this range. Exhaustion is not
really an issue since in extremis the response could be more tunnels.