Routing Security

Architecture for Securing the Routing Infrastructure


Home
People
Publications
References
Download
 
Computer Security Group

The testbed uses BIND as the nameserver. Releases later that 9.x use rndcto manage it. The daemon and rndc use a security key which can be generated using

# dnssec-keygen -a hmac-md5 -b 256 -n user rndc

The key is generated using the HMAC_MD5 algorithm. As a result of the command, two files are generated, "Krndc.+157+61591.key" and "Krndc.+157+61591.private". The key is in the "Krndc.+157+61591.private" file, after the tag "Key:"

The configuration files on router foxtrot are provided.

/etc/named.conf
/etc/rndc.conf
/var/named/root.hint
/var/named/127.0.0.zone
/var/named/192.168.1.zone
/var/named/192.168.2.zone
/var/named/192.168.3.zone
/var/named/192.168.4.zone
/var/named/192.168.5.zone
/var/named/192.168.6.zone
/var/named/192.168.7.zone
/var/named/192.168.8.zone
/var/named/192.168.9.zone
/var/named/192.168.10.zone
/var/named/192.168.11.zone
/var/named/rsl.ucsb.edu.zone


Administrator