Subject: RE: security issues with mpls based IP-VPN

From: "Fang, Luyuan, ALABS" <[email-masked]>
Date: Wed, 2 Apr 2003 11:36:32 -0600

Willy,
 
There are a few related Drafts on PPVPN or MPLS VPN security:
 
'Security Framework for Provider Provisioned Virtual Private Networks'   <http://www.ietf.org/internet-drafts/draft-fang-ppvpn-security-framework-00.txt> http://www.ietf.org/internet-drafts/draft-fang-ppvpn-security-framework-00.txt
 
'Analysis of the Security of the MPLS Architecture' 
 <http://www.ietf.org/internet-drafts/draft-behringer-mpls-security-03.txt> http://www.ietf.org/internet-drafts/draft-behringer-mpls-security-03.txt
 
'MPLS VPN Import/Export Verification' 
 <http://www.ietf.org/internet-drafts/draft-behringer-mpls-vpn-auth-01.txt> http://www.ietf.org/internet-drafts/draft-behringer-mpls-vpn-auth-01.txt 
 
'CE-to-CE Member Verification for Layer 3 VPNs' 
 <http://www.ietf.org/internet-drafts/draft-ietf-ppvpn-l3vpn-auth-03.txt> http://www.ietf.org/internet-drafts/draft-ietf-ppvpn-l3vpn-auth-03.txt 
 
We are asking for input on the draft of PPVPN Security Framework. Comments from anyone would be appreciated.
 
Thanks,
Luyuan Fang
AT&T

-----Original Message-----
From: Duric Willy [mailto:[email-masked]]
Sent: Wednesday, April 02, 2003 11:57 AM
To: [email-masked]
Subject: security issues with mpls based IP-VPN

Gents, 

Does anybody have information related to security on mpls based IP-VPN. For exemple, is it possible to perform label spoofing (by analogy of IP spoofing). What are the other security issues  ?

Thanks in advance. 
Willy