>> i'm a university student, for my degree thesis i have to investigate
>> Routing Security Problem in IPv6.=20
>> After Reading RFCs about RIPng and OSPF for IPv6 all i found is that
>> to secure routing protocols IPSec will be used. Well i couldn't find
>> any details about HOW ipsec will be used.
>> So my question is:is this a vendor/implementation issue?
>
>I'd think, configuration issue.
>
>Both protocols you mention are interiour routing protocols, so it might even
>be feasible to set the routers up with a small number of pre-shared keys used
>to authenticate the routing messages to one another.
>
>See the relevant documents for details.
my take is that RIPng and OSPFv3 spec should be revised to talk more
about how they should interact with IPsec. since these protocols use
link-local multicast (as well as link-local unicast),
- IPsec implementation must have a proper scope support
- IKE implementation must have a proper scope support (ID payload
handling gets very tricky)
- automatic keying with IKE is impossible for multicast case!
to summarize, just saying "use IPsec" is not enough.
itojun
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page: http://playground.sun.com/ipng
FTP archive: ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------
