From 762c824df599d9291b3db2fcb52223f2d07ea630 Mon Sep 17 00:00:00 2001 From: Randy Bush Date: Sun, 13 Feb 2022 17:34:12 -0800 Subject: [PATCH] gtsm by default --- draft-ymbk-idr-l3-discovery.xml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/draft-ymbk-idr-l3-discovery.xml b/draft-ymbk-idr-l3-discovery.xml index 14fe364..0d499cf 100644 --- a/draft-ymbk-idr-l3-discovery.xml +++ b/draft-ymbk-idr-l3-discovery.xml @@ -500,6 +500,10 @@ Flags (bit): TLS/TCP service, and responses MUST be unicast TLS/TCP client session open requests to it using the same AFI. + By default, GTSM, , SHOULD be enabled to + test that a received HELLO MUST be on the local link. It MAY be + disabled by configuration. + If more than one device responds, one adjacency is formed for each unique source IP address. L3ND treats each adjacency as a separate logical link. @@ -533,6 +537,10 @@ Flags (bit): would have compatible parameters on all devices, any disagreement over TLS/TCP or trust anchors MUST be logged. + By default, GTSM, , SHOULD be enabled to + ensure that a SYN received in response to a HELLO is on the local + link. It MAY be disabled by configuration. + If the receiver of a HELLO agrees with the sender's choice of TLS/TCP and authentication, both sides have agreed on an AFI for the transport and on each other's IP address in that AFI. This is @@ -1329,6 +1337,7 @@ Flags (bit): +