Protecting The Router Control Plane draft-ietf-opsec-protect-control-plane-01 David Dugal Carlos Pignataro Rodney Dunn Presented by Andrew Yourtchenko IETF 78, July 2010, Maastricht, Netherlands

Motivation  Driver:  Author an OPSEC WG document that recommends, and demonstrates through example, a mechanism to protect the router control plane.  Focus Area:  Protecting a critical and precious resource: The Router Control Plane  Intended Status:  Informational Router Control Plane Protection Control Plane Forwarding Plane

Document Approach  Introduction  Explain the concept of router control plane router protection from an architectural perspective  Applicability  Methodology  Clear definition of initial set of “legitimate traffic”  Filter and Policy Design  Design Trade-Offs and “Gotchas”  Security Considerations  Basic Multi-Vendor Configuration Examples  Provides starting point from which environment-specific additions can be made

 Accepted as an official OPSEC WG document  All* feedback received to date included in revision -01  *Addition of IPv6 references, examples and recommendations currently being added, will be included in revision -02  Goal is to have revision -02 ready for Working Group Last Call by mid-August 2010 Document Status

 Please continue to provide valuable review, comments, questions and feedback  Would like to WGLC after we ship IPv6 in rev -02  The authors would like to thank all who provided assistance in increasing the validity and value of the document to the OPSEC community:  Ron Bonica, Pekka Savola, Warren Kumari, Xu Chen, John Kristoff, Christopher Morrow, Donald Smith, Joel Jaeggli, Richard Graveman, Danny McPherson, Gregg Schudel, Eddie Parra, Seo Boon, Manav Bhatia, Jim Bailey, Andrew Yourtchenko, and many others Requests and Acknowledgements

Thank You!