Re: Routing loop attacks using IPv6 tunnels

[Gabi Nakibly <gnakibly@yahoo.com>]

Correct. All the attacks rely on the fact that the ISATAP router encapsulates/decapsulates a packet the 6to4 relay decapsulates/encapsulates, respectively. So the two tunnels must have the same encapsulation type.

----- Original Message ----
> From: "Templin, Fred L" <Fred.L.Templin@boeing.com>
> To: Gabi Nakibly <gnakibly@yahoo.com>; v6ops <v6ops@ops.ietf.org>
> Cc: ipv6@ietf.org; secdir@ietf.org
> Sent: Friday, August 28, 2009 7:23:03 PM
> Subject: RE: Routing loop attacks using IPv6 tunnels
> 
> Gabi,
> 
> Correct me if I am wrong, but if there were a new version
> of ISATAP that did not use ip-proto-41 encapsulation but
> instead used a different kind of encapsulation, then it
> need not concern itself with routing loop interactions
> with 6to4 relays since 6to4 relays only know about
> ip-proto-41. Does that match your understanding? 
> 
> Thanks - Fred
> fred.l.templin@boeing.com