RFC and Standards Documents

In this post, I will keep a running tally of IETF RFC and/or IEEE Standards documents that are relevant to the CCIE Security v6 Lab exam and/or just useful references in general. This is in no particular order (for the time being) and should be considered a living document which I will update as things come to mind, and I’ll link this post on my External Resources page.

RFC2827 Network Ingress Filtering (this is specifically called out on the v6 blueprint 😉 )

RFC3330 – Special-Use IPv4 Addresses

RFC1918 – Address Allocation for Private Internets

RFC5737 – IPv4 Address Blocks Reserved for Documentation

RFC4564 – Objectives for CAPWAP

RFC5415 – CAPWAP Protocol Specification

RFC5418 – CAPWAP 802.11 Threat Analysis

RFC3378 – EtherIP: Tunneling Ethernet Frames in IP Datagrams

RFC793 – Transmission Control Protocol (Original)

RFC9293 – Transmission Control Protocol (Updated)

RFC768 – User Datagram Protocol

RFC2865 – Remote Authentication User Dial-In Service (RADIUS)

RFC6929 – RADIUS Protocol Extensions

RFC5176 – RADIUS Change of Authorization (CoA)

RFC8907 – Terminal Access Controller Access-Control System Plus (TACACS+)

RFC 6125 – Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)

RFC3826 – The Advanced Encryption Standard (AES) Cipher Algorithm

RFC6234 – US Secure Hash Algorithms (SHA/HMAC)

RFC 2631 – The Diffie-Hellman Key Agreement Method

RFC8422 – Elliptic Curve Cryptography Cipher Suites for TLS 1.2 and Earlier

IEEE802.1AE – Media Access Control Security

RFC3507 – Internet Control Adaptation Protocol

WCCPv2 – Web Cache Communications Protocol

SQUID – SQUID Logging Format

RFC7457 – Summarizing Known Attacks on TLS and DTLS

RFC9325 – Recommendations for Secure Use of TLS and DTLS

v~~~~WIP/TBD~~~~v

IPv4

IPv6

XMPP

GRE

netflowv9 3954

NAT

DHCP

DNS

ARP

sender policy framework 4408

5585 dkim

6376

5863

5617

IPSec

BGP

OSPF

EIGRP

SSL/TLS

DTLS

AH 4302

ESP 4303

IKEv1 https://datatracker.ietf.org/doc/html/rfc2409

IKEv2 7296

IKE Roadmap 6071

NHRP https://www.rfc-editor.org/rfc/rfc2332.html