Re: misconfiguring the tunnel source address [mech-v2-04]

[Vladislav Yasevich <vladislav.yasevich@hp.com>]

Pekka Savola wrote:

> I just checked 4 different implementations: Linux, BSD, Cisco and
> Juniper.  All of them "allow" the administrator to misconfigure the
> source addresses.  This would seem like a hint that the implementors
> want to give the power to the administrators, or not bother with
> additional checks. I'd be interested if you know of implementations
> which check the tunnel source address at configuration time?

Tru64 and maybe HP-UX do.

It seems like this problem is an artifact of uni-directional tunnels
that were present in rfc2893.  Since all tunnels now are bi-directional
point-to-point links, the additional specification may be a good idea.
This way, additional guidance is given to the implementors.

-vlad
--
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Vladislav Yasevich		Linux and Open Source Lab
Hewlett Packard 		Tel: (603) 884-1079
Nashua, NH 03062		ZKO3-3/T07