North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: IPv6: IS-IS or OSPFv3

  • From: Kevin Oberman
  • Date: Sat Dec 27 18:54:07 2008

> Date: Sat, 27 Dec 2008 15:23:25 -0500
> From: "Steven M. Bellovin" <[email protected]>
> 
> On Fri, 26 Dec 2008 20:37:41 -0800
> "Kevin Oberman" <[email protected]> wrote:
> 
> > The main reason I prefer ISIS is that it uses CLNS packets for
> > communications and we don't route CLNS. (I don't think ANYONE is
> > routing CLNS today.) That makes it pretty secure.
> 
> Unless, of course, someone one hop away -- a peer?  a customer?  an
> upstream or downstream? someone on the same LAN at certain exchange
> points? -- sends you a CLNP packet at link level...

You mean that someone is silly enough to enable CLNS on external
interfaces? I mean, it's not by default on either Cisco or Juniper. I
don't imagine any other routers do that, either. (Of course, SOMEONE is
always that silly. But I hope the folks reading this are not.)
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: [email protected]			Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751

Attachment: pgp00021.pgp
Description: PGP signature