[c-nsp] MPLS down to the CPE
Saku Ytti
saku at ytti.fi
Tue Mar 5 05:28:20 EST 2013
On (2013-03-05 11:06 +0100), Benny Amorsen wrote:
> Maybe one day we will get either strict MPLS label checks or L2
> encryption and authentication. At that point the only attacks are to the
> CE itself. I am not holding my breath.
You need lung capacity of just weeks. Next IOS-XR release will implement
RFC4364 page32 last sentence, i.e. uRPF/strict for OptB labels.
--
++ytti
More information about the cisco-nsp
mailing list