Re: [trill] Review of draft-ietf-trill-oam-framework-01.txt

[Donald Eastlake <[e-mail]>]

Hi Gayle,

On Mon, Apr 1, 2013 at 1:13 AM, gayle noble <[e-mail]> wrote:
>  In reading some of the drafts it occurred to me that something should be
> specified as to how one should handle OAM messages that might be sent from
> outside the TRILL campus in the draft that talks about this.
>
> Currently in draft draft-ietf-trill-oam-framework-01.txt, in the Security
> Considerations Section it says:
> "Optionally authenticate communicating endpoints (MEPs and MIPs)"
>
> To be real clear I think it should read something like::
>
> "Optionally authenticate at communicating endpoints (MEPs and MIPs)
> that an OAM message has originated at a communicating endpoint."

Thanks for the comment...
Maybe it should even say "... has originated at an appropriate
communicating endpoint."

> Perhaps even add in that if the OAM message fails authentication, the switch
> should log the attempt and notify the sys admin. Or maybe that is obvious?

I don't think the IETF is complete consistent on this point but
generally IETF specifications concentrate on the bits on the wire and
the state machines at the end points so they frequently omit saying
anything explicit about logging...

Thanks,
Donald
=============================
 Donald E. Eastlake 3rd   [phone] (cell)
 155 Beaver Street, Milford, MA 01757 USA
 [e-mail]

> gayle