Security Framework for Provider-Provisioned Virtual Private Networks
RFC 4111, “Security Framework for Provider-Provisioned Virtual Private Networks”, is an Informational document published in July 2005 by L. Fang. It has since been updated by RFC 8996. The canonical text is published by the RFC Editor.
Abstract
This document addresses security aspects pertaining to Provider-Provisioned Virtual Private Networks (PPVPNs). First, it describes the security threats in the context of PPVPNs and defensive techniques to combat those threats. It considers security issues deriving both from malicious behavior of anyone and from negligent or incorrect behavior of the providers. It also describes how these security attacks should be detected and reported. It then discusses possible user requirements for security of a PPVPN service. These user requirements translate into corresponding provider requirements. In addition, the provider may have additional requirements to make its network infrastructure secure to a level that can meet the PPVPN customer's expectations. Finally, this document defines a template that may be used to describe and analyze the security characteristics of a specific PPVPN technology. This memo provides information for the Internet community.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 4111 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 4110 A Framework for Layer 3 Provider-Provisioned Virtual Private Networks
- RFC 4112 Electronic Commerce Modeling Language Version 2 Specification
- RFC 4109 Algorithms for Internet Key Exchange version 1
- RFC 4113 Management Information Base for the User Datagram Protocol
- RFC 4108 Using Cryptographic Message Syntax to Protect Firmware Packages
- RFC 4114 E.164 Number Mapping for the Extensible Provisioning Protocol
- RFC 4107 Guidelines for Cryptographic Key Management
- RFC 4115 A Differentiated Service Two-Rate, Three-Color Marker with Efficient Handling of in-Profile Traffic