[c-nsp] MPLS down to the CPE

Saku Ytti saku at ytti.fi
Tue Mar 5 05:28:20 EST 2013


On (2013-03-05 11:06 +0100), Benny Amorsen wrote:

> Maybe one day we will get either strict MPLS label checks or L2
> encryption and authentication. At that point the only attacks are to the
> CE itself. I am not holding my breath.

You need lung capacity of just weeks. Next IOS-XR release will implement
RFC4364 page32 last sentence, i.e. uRPF/strict for OptB labels.

-- 
  ++ytti


More information about the cisco-nsp mailing list