Authenticating L3VPN Origination Signaling
Internet Initiative Japan
Cisco Systems
Cisco Systems
Cisco Systems
Verizon
A BGP-signaled Layer-3 VPN's prefix bindings sent over BGP are subject to unintentional errors, both by the legitimate originator and by non-legitimate origins. This is of special concern if the VPN traverses untrusted networks. This document describes how the sender of the Prefix/VPN binding may sign it so that recipient of the binding may authenticate it.