Subject: [secdir] Secdir review of draft-ietf-pals-mpls-tp-dual-homing-protection-05

From: "Waltermire, David A. (Fed)" <[email-masked]>
Date: Mon, 13 Feb 2017 04:04:38 +0000

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

Summary: Ready

This informational draft identifies a mechanism for fault tolerance in preferred configurations for dual-homed Pseudowires that are used to carry traffic between the Provider Edge nodes when the Attachment Circuit, a Provider Edge node, or the  packet-switched network fails.

The draft identifies a number of failure scenarios, and identifies how dual homing can improve the reliability and integrity of a network implementing this approach. This draft does not introduce any new security concerns over the existing specifications it references. This draft appears to be ready for publication.

Regards,
Dave Waltermire