Subject: [secdir] Secdir review of draft-ietf-l2tpext-keyed-ipv6-tunnel-07

From: "Waltermire, David A. (Fed)" <[email-masked]>
Date: Tue, 1 Nov 2016 16:16:12 +0000

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

Summary: Ready

This standards track draft describes a mechanism for establishing an Ethernet tunnel over IPv6 using L2TPv3 encapsulation. IPv6 is ideal since unique IP addresses can be used to when establishing a L2TPv3 session. This can allow for an optimization, over current multiplexing approaches, where consulting the L2TPv3 session ID is not needed if each tunnel is assigned a unique IPv6 address. 

I found that the draft clearly articulates the problem that is solved. The security considerations seem to be appropriate for the draft. This draft appears to be ready for publication.

Regards,
Dave Waltermire