Subscriber Management MIBChanges from -03 to -04

• New text for IP fragment attacks on filters

  • References to RFC 3128 and RFC 1858
  • Recommended interpretation:
    • admit all packets with fragment offset >= 2
    • discard all packets with fragment offset = 1, or with fragment offset = 0 and fragment payload length < 16.
    • apply filtering rules to all packets with fragment offset = 0.

• no changes in MIB structure

  • just module-identity update and BITS syntax fix

• minor editorial touchups:

  • updated document references and IETF boilerplate

Previous slide

Next slide

Back to first slide

View graphic version