RFC 3871: Operational Security Requirements for Large Internet Service Provider (ISP) IP Network Infrastructure

This document defines a list of operational security requirements for the infrastructure of large Internet Service Provider (ISP) IP networks (routers and…

Read RFC 3871 on the RFC Editor

Outgoing relationships (32 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 2026: The Internet Standards Process -- Revision 3
Normative reference — RFC 3410: Introduction and Applicability Statements for Internet-Standard Management Framework
Normative reference — RFC 1321: The MD5 Message-Digest Algorithm
Normative reference — RFC 1918: Address Allocation for Private Internets
Normative reference — RFC 2401: Security Architecture for the Internet Protocol
Normative reference — RFC 2865: Remote Authentication Dial In User Service (RADIUS)
Normative reference — RFC 2246: The TLS Protocol Version 1.0
Normative reference — RFC 3411: An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks
Normative reference — RFC 1812: Requirements for IP Version 4 Routers
Normative reference — RFC 2827: Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing
Normative reference — RFC 3588: Diameter Base Protocol
Normative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Normative reference — RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option
Normative reference — RFC 3579: RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP)
Normative reference — RFC 3174: US Secure Hash Algorithm 1 (SHA1)
Normative reference — RFC 2631: Diffie-Hellman Key Agreement Method
Normative reference — RFC 1510: The Kerberos Network Authentication Service (V5)
Normative reference — RFC 1704: On Internet Authentication
Normative reference — RFC 3330: Special-Use IPv4 Addresses
Normative reference — RFC 2196: Site Security Handbook
Normative reference — RFC 3562: Key Management Considerations for the TCP MD5 Signature Option
Normative reference — RFC 3164: The BSD Syslog Protocol
Normative reference — RFC 3309: Stream Control Transmission Protocol (SCTP) Checksum Change
Normative reference — RFC 1208: A Glossary of Networking Terms
Normative reference — RFC 1492: An Access Control Protocol, Sometimes Called TACACS
Normative reference — RFC 3013: Recommended Internet Service Provider Security Services and Procedures
Normative reference — RFC 3360: Inappropriate TCP Resets Considered Harmful
Normative reference — RFC 3631: Security Mechanisms for the Internet
Normative reference — RFC 3195: Reliable Delivery for syslog
Informative reference — RFC 3704: Ingress Filtering for Multihomed Networks
Informative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys

Incoming relationships (4 related RFCs)

Updated by, Normatively referenced by — RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Informatively referenced by — RFC 6728: Configuration Data Model for the IP Flow Information Export (IPFIX) and Packet Sampling (PSAMP) Protocols
Informatively referenced by — RFC 9288: Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers at Transit Routers
Informatively referenced by — RFC 6441: Time to Remove Filters for Previously Unallocated IPv4 /8s