Skip to Content.
Sympa Menu

netsec-sig - Re: [Security-WG] I2 - Routing security survey results

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] I2 - Routing security survey results


Chronological Thread 
  • From: gcbrowni <>
  • To:
  • Cc:
  • Subject: Re: [Security-WG] I2 - Routing security survey results
  • Date: Fri, 2 Dec 2016 10:58:09 -0500
  • Ironport-phdr: 9a23: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

Yes, we are ABSOLTLY going to do more than just BGP/179 & iBGP edge
filtering. I suspect we’ll do guides on most of the topic areas, it’s only a
matter of which we do first.

The Juniper code suggestions are going to be very valuable. Helping people
implement these in a easy way is going to be an important part of the guides.
I just hope that the Cisco versions are going to be an easy …





> On Dec 1, 2016, at 10:21 AM, John Kristoff
> <>
> wrote:
>
> On Thu, 1 Dec 2016 14:51:53 +0000
> gcbrowni
> <>
> wrote:
>
>> Based on the SHOULD/MUST column, it would seem that we should start
>> with a discussion paper on filter BGP/tcp-179 and then maybe iBGP
>> edge filtering? How’s that sound, or does anyone have some alternatre
>> suggestions?
>
> Sounds good to me. It seems like GTSM is an easy win at IXes or p2p
> links. Perhaps we can add this as a third item on the todo list? I'll
> add this to our todo here locally where applicable.
>
> John

Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.19.

Top of Page