40 likes | 157 Views
Routing Loops using ISATAP and 6to4 : Problem Statement and Proposed Solutions. The Problem. Root Causes. A router does not know which end nodes currently participate in the tunnel. An attacker can easily spoof source addresses. Proposed Solutions. Neighbor cache check
E N D
Routing Loops using ISATAP and 6to4: Problem Statementand ProposedSolutions
Root Causes • A router does not know which end nodes currently participate in the tunnel. • An attacker can easily spoof source addresses.
Proposed Solutions • Neighbor cache check • Destination and source address check • Known IPv4 prefix check • Known IPv6 address check • Known IPv4 router addresses