[c-nsp] source address/interface in the IOS-XR RPKI validator config

Tassos Chatzithomaoglou achatz at forthnet.gr
Fri Dec 2 04:18:46 EST 2016


Does anyone have any idea (or inside info) why Cisco hasn't added an
option for source address/interface in the RPKI validator communication?
Currently the outgoing interface is used as source, which conflicts with
our mgmt/sec policy.

RPKI is available in IOS-XR since 4.2.1
(https://www.nanog.org/sites/default/files/Patel.pdf) and according to
Cisco no customer has asked for it since then.
Since i'm the first/only one asking for it, am i missing something
obvious here?

--
Tassos



More information about the cisco-nsp mailing list