IETF Logo Mail Archive

Re: [secdir] Review of draft-ietf-mpls-entropy-lsp-ping-04

"Carlos Pignataro (cpignata)" <cpignata@cisco.com> Thu, 01 September 2016 15:15 UTC

Return-Path: <cpignata@cisco.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B346112DA2C for <secdir@ietfa.amsl.com>; Thu, 1 Sep 2016 08:15:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.048
X-Spam-Level:
X-Spam-Status: No, score=-15.048 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.548, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3W0RpWfVv7d1 for <secdir@ietfa.amsl.com>; Thu, 1 Sep 2016 08:15:10 -0700 (PDT)
Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A760312DA38 for <secdir@ietf.org>; Thu, 1 Sep 2016 08:15:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6800; q=dns/txt; s=iport; t=1472742908; x=1473952508; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=k4OLA8SSXPMNaj9IyURCVj9A+mt1E27NpZSt0GTYtPs=; b=bvIn75pQW0fKsUOeI9T/htWqggQcDwYvSmopbitni/O0RYDtlWRReFym q9pdHyLei6LHOr9PEry/wV3ECq48lfMcabOUYgQI6YdA37mbfFFiuU6AU 84/Y1SnSuFqQ5XgTR0LxTqSfjPfOBtkXPSrGPtkUOjYPxIB0dXgnvTw2B A=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0DKAgCXRchX/4QNJK1dg1ABAQEBAR6BUwerbocohQ2CAoYcAhyBMzgUAQIBAQEBAQEBXieEYgEFI0gOEAIBCAQ7AwICAh8RFBECBA4FiC4DF64CiTkNgy8BAQEBAQEBAQEBAQEBAQEBAQEBAQEchi+BeIJVgkOEfyuCLwWUCYUTNAGMXYJTj1eIP4QJg3gBHjaEMXCFbX8BAQE
X-IronPort-AV: E=Sophos;i="5.30,268,1470700800"; d="scan'208,217";a="142442824"
Received: from alln-core-10.cisco.com ([173.36.13.132]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 01 Sep 2016 15:15:07 +0000
Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by alln-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id u81FF72G001145 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 1 Sep 2016 15:15:07 GMT
Received: from xch-rtp-020.cisco.com (64.101.220.160) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 1 Sep 2016 11:15:06 -0400
Received: from xch-rtp-020.cisco.com ([64.101.220.160]) by XCH-RTP-020.cisco.com ([64.101.220.160]) with mapi id 15.00.1210.000; Thu, 1 Sep 2016 11:15:06 -0400
From: "Carlos Pignataro (cpignata)" <cpignata@cisco.com>
To: "Andrew G. Malis" <agmalis@gmail.com>
Thread-Topic: Review of draft-ietf-mpls-entropy-lsp-ping-04
Thread-Index: AQHSAjNlgOV36X1rzE2hxO8HBsuHYaBh0kEAgAMzowA=
Date: Thu, 01 Sep 2016 15:15:06 +0000
Message-ID: <D82BC293-35C1-48C6-9AB3-8E71F22985E6@cisco.com>
References: <5770C231.9060301@oracle.com> <3413ce55-8a13-9698-5985-7fecc8c8f038@oracle.com> <CAA=duU0FJnU7az+4Oqrrv6+24oAaN-vwEDz=hbCkDNoyCmmU5g@mail.gmail.com>
In-Reply-To: <CAA=duU0FJnU7az+4Oqrrv6+24oAaN-vwEDz=hbCkDNoyCmmU5g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.150.21.184]
Content-Type: multipart/alternative; boundary="_000_D82BC29335C148C69AB38E71F22985E6ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/N5zNjWrlSuQa5-gdsg-6cxVJ7FA>
Cc: "draft-ietf-mpls-entropy-lsp-ping.all@tools.ietf.org" <draft-ietf-mpls-entropy-lsp-ping.all@tools.ietf.org>, "secdir@ietf.org" <secdir@ietf.org>
Subject: Re: [secdir] Review of draft-ietf-mpls-entropy-lsp-ping-04
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Sep 2016 15:15:15 -0000

Dear Shawn,

Thanks again — just closing the loop, all fixed in our working copy.

— Carlos.

On Aug 30, 2016, at 10:21 AM, Andrew G. Malis <agmalis@gmail.com<mailto:agmalis@gmail.com>> wrote:

Shawn,

Many thanks for your review. We’ll fix the editorial comment. Regarding LSP stitching, this is well known to MPLS experts, but you’re right, this should be referenced. RFC 6424, which we already have in the references, is an excellent reference for LSP stitching and using LSP Ping and Traceroute over stitched LSPs. We’ll add [RFC6424] in the appropriate locations.

Thanks again,
Andy


On Tue, Aug 30, 2016 at 4:26 AM, Shawn M Emery <shawn.emery@oracle.com<mailto:shawn.emery@oracle.com>> wrote:

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security
area directors. Document editors and WG chairs should treat these
comments just like any other last call comments.

This draft specifies multipath support in environments where Entropy Labels
(ELs) are used so that Label Switched Path (LSP) Ping and Traceroute
operations are possible.

The security considerations section does exist and refers to the security
considerations in base specifications for applicability.  The sections
continues that there are no new security considerations with
this specification.  I agree with this assertion.

General comments:

None.

Editorial comments:

s/initiator to not be able to/initiator that is unable to/

"LSPs stitched together": not for sure what "stitched" means and wasn't
defined in the Terminology section.

Shawn.
--

v2.23.0 | Report a Bug | By Email