[isp-bgp] TCP MD5 authentication for BGP

[Doug Legge <Doug.Legge@...>]

I'm writing a paper for submission as part of a MSc in Data Communications,
and would appreciate if anyone could update me as to the use of MD5 for TCP
authentication in BGP.

Following the alerts last year:

http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml
http://www.us-cert.gov/cas/techalerts/TA04-111A.html
http://www.cisco.com/en/US/products/products_security_advisory09186a00803be7
d9.shtml
http://www.foundrynet.com/solutions/security/TCP_Vulnerability_v1_3.pdf
http://www.kb.cert.org/vuls/id/415294
http://isc.sans.org/diary.php?date=2004-04-20

What has been the general effect in the ISP/Enterprise community following
the warnings?

- Have people applied MD5?
- If not what other technologies were implemented?
- Has there been any performance impact seen since implementation?
- Has the support of the BGP environment been increased because of this
implementation?
- Was this seen as a valid fix or a knee-jerk reaction?

Please do not supply confidential information or anything that would be
commercially sensitive, if you want to contact me off-line or from a private
account please do

Thanks

Yours

Doug Legge
MDC Student
Kingston University
London






To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Copyright 2005 Jupitermedia Corporation All Rights Reserved.