Hi Sam, In section 2, while explaining the challenge response solution For a new router coming up on the LAN is described, a router changes it's Nonce when it detects a new node on the LAN.
1. This feature can be used to launch DOS attacks and cause a router to change the nonce continuously. However I cannot think of a completely secure solution to avoid DOS but introducing a minimum time (Similar to MinLSArrival) to change the nonce might be helpful to reduce the effect. 2. When a node detects change in the nonce in a hello message, it might have to send hello immediately to ensure it's adjacency as it's some of the previous hellos might be dropped by the router which changed the nonce. This can be mentioned explicitly in the Receive packet handling section. 3. As I understand, the nonce is not checked for messages other than hello so it can be removed from the trailer for other messages? Rgds Shraddha **************************************************************************** *********** This e-mail and attachments contain confidential information from HUAWEI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient's) is prohibited. If you receive this e-mail in error, please notify the sender by phone or email immediately and delete it! _______________________________________________ OSPF mailing list OSPF@ietf.org https://www.ietf.org/mailman/listinfo/ospf
