| Description | This object is used to enable greater security for
implementation that use per platform VC label space. In
strict mode, packets coming from the PSN are accepted only
from tunnels that are associated to the same VC via the
inbound tunnel table in the case of MPLS, or as identified
by the source IP address in case of L2TP or IP PSN. The
entries in the inbound tunnel table are either explicitly
configured or implicitly known by the maintenance protocol
used for VC set-up.
If such association is not known, not configured or not
desired, loose mode should be configured, and the node
should accept the packet based on the VC label only
regardless of the outer tunnel used to carry the VC. |