[secdir] Secdir review of draft-ietf-trill-rfc7180bis-06

[Catherine Meadows <[e-mail]>]

 I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.

This document presents a number of clarifications, corrections  and updates to the RFCs associated with the Transparent Interconnection 
of Lots of Links (TRILL) protocol.  None of seem directly related to security, although some of it might support security by helping to
give nodes a more accurate picture of state of the network.

I have a few comments about the security considerations, mainly having to do with clarification:


The Security Considerations Section reads:

See [RFC6325] for general TRILL security considerations.

   This memo improves the documentation of the TRILL protocol, corrects
   five errata in [RFC6325], updates [RFC6325], [RFC7177], and [RFC7179]
   and obsoletes [RFC7180]. In most cases, it does not change the
   security considerations of those RFCs.

   E-L1FS FS-LSPs can be authenticated with IS-IS security [RFC5310].

I found this a little unclear.  Is the sentence "E-L1FS FS-LSPs can be authenticated with IS-IS security [RFC5310].”
intended to be the sole modification to the security considerations of the RFC’s.  If so, it would be helpful to make this clearer
by saying something like:

In most cases, it does not change the
   security considerations of those RFCs, except in the following case.

I consider document this Ready with nits.

Cathy Meadows

Catherine Meadows
Naval Research Laboratory
Code 5543
4555 Overlook Ave., S.W.
Washington DC, 20375
phone: [phone]
fax: [phone]
email: [e-mail]