Hi, all,
On 6/4/2011 5:56 PM, Christopher Morrow wrote:
On Sat, Jun 4, 2011 at 10:02 AM, Joe Touch<[email protected]> wrote:
So basically the problem is that:
- routers don't all support IPsec for the control plane
- servers don't yet implement AO
routers don't yet support AO either :( at least not in juniper 10.x
code nor cisco 12.2(S) or 15 code...
(or not that I've seen and been able to configure, though at least 1
of the 2 there say 'coming RSN!')
One other thing to keep in mind is whether this doc (and to some extent,
the IETF as a whole) should follow or lead.
If we're followers, then the answer is clear - watch what the hackers
implement.
If we're leaders, we should focus on the goal state, recognizing that
all issued requirements are - at best - goals anyway.
Yes, servers will support AO, if for no other reason than they support BGP and
MD5 now.
agreed, some heat is required to make this happen (heat == 'gosh I'd
love my Oracle/fbsd/linux server(s) to be able to run quagga to my new
and old IOS boxes...')
Again, follow vs. lead. If we're leading, then we should recognize that
we're talking about a very small amount of resources need to accomplish
this task. I'm already working with the funding agencies and a few
companies with similar 'rfp' processes to access those resources. If
anyone wants to help with any resources, please let me know.
Joe
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr
