Le 21 janv. 2010 à 10:31, WashamFan a écrit :

> If 6rd-A and 6rd-B belong to the same 6rd domain, I don't see the routing 
> loops.

This a limit case, but if a BR accepts tunnels toward other BRs of the same 
domain, an IPv6 Internet host with a spoofed source address can initiate a loop:

    v6dst = v6src = PA.Aa 

   +------------------------+
   |          ====>         |
   |                        |
   |     IPv6 Internet      |
   |                        |
   +------+-----------+-----+
          |           |
          |prefix PA  |prefix PA
       +--+--+     +--+--+
   +---+6rd-A+-----+6rd-B+--+
   |   +-----+     +-----+  |
   | address Aa  address Aa |
   |          <====         |
   |                        |
   |        IPv4 ISP        |
   +------------------------+


Regards,
RD
_______________________________________________
Softwires mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/softwires

Reply via email to