Hi Peter & Les,

I was looking at the draft, but failed to find any text which would be a
normative MUST and would state that only advertisers of a given summary are
allowed to inject specific UPAs covered by those summaries.

If it comes from some other node it MUST be dropped.

I think this is just an omission and security hole. If not please elaborate
why you have chosen not to make this restriction explicit in the text.

Thx,
R.

PS. The way I read the current draft means that any bug in the ABR can
trigger a blast of UPAs for any prefix irrespective of the area ABR is
connected to. That's not too good.
_______________________________________________
Lsr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/lsr

Reply via email to