Evaluation: draft-ietf-vrrp-spec-v2-09

[Russ Housley <housley@vigilsec.com>]

draft-ietf-vrrp-spec-v2-09.txt
Virtual Router Redundancy Protocol (Draft Standard)

  Russ Housley         [   ]     [   ]     [ X ]     [   ]

  Section 10, the security considerations, clearly indicates that 
incorrectly configured or hostile routers can become VRRP masters.  This 
statement proves the need for an authentication mechanism  However, 
previously supported authentication is being removed.  I believe that the 
section should be expanded to state what harm a malicious router can cause 
if it becomes the VRRP master.