Transparent Interconnection of Lots of Links (TRILL): RBridge Channel Header Extension

Transparent Interconnection of Lots of Links (TRILL): Address Flush Message

“…However, Address Flush protocol messages can be secured by use of the RBridge Channel Header Extension [RFC7978]. It is RECOMMENDED that all RBridges that implement the Address Flush message be configured to ignore such messages unless they have been secured with an RBridge Channel Header Extension that meets local security policy.…”

Transparent Interconnection of Lots of Links (TRILL): Appointed Forwarders

“…Port-Shutdown messages can be secured through the use of the RBridge Channel Header Extension security feature [RFC7978]. A TRILL switch SHOULD compare the FGL-VLAN mappings that it sees advertised by other TRILL switches on a link with its own and alert the network operator if they are inconsistent.…”

“…Such messages SHOULD be secured through the use of the RBridge Channel Header Extension [RFC7978]. If they are not adequately secured, they are a potential denial-of-service vector.…”