> But the above is a SHOULD and the validity checks in section 8.1
> say MUST discard when this fails:
> 
>       - The IP source address of the Redirect is the same as 
> the current
>         first-hop router for the specified ICMP Destination Address.
> 
> If there is only one default route pointing at the link
> from which the redirect was received
> (or for implementations with a richer routing table, 
> the lookup of the destination address only finds one routing
> table entry that points at that link), then the redirect can
> be safely used to create a destination cache entry.
> 
> But when the lookup finds more than one possible next hops 
> that might have
> been used to send the original packet, it seems a bit dangerous to
> accept the redirect.

The "current first-hop router for a destination" is a well-defined
concept in our implementation, even if there are multiple default
routers and no current destination cache entry.  I don't see the danger
in accepting the redirect under those circumstances.

Rich
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to