softwire-1----Page:13
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
|
Softwire Mesh Security Protection Control Plane Protection TDP MD5 MUST be supported Peer-peer based authentication Replay protection is not enough No protection for confidentiality IPsec ESP provide confidentiality as well as integrity and authentication. IKE must be supported for replay protection S-BGP, soBGP, and psBGP (Byzantine attacks) Data Plane Protection IPsec Encapsulation To support replay protection, integrity, and confidentiality ESP, IKE Access Control Techniques |