Last Call Review of draft-ietf-ccamp-oam-configuration-fwk-11
review-ietf-ccamp-oam-configuration-fwk-11-secdir-lc-nystrom-2014-01-09-00

 I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
 These comments were written primarily for the benefit of the security
area directors. Document editors and WG chairs should treat these
comments just like any other last call comments.

This document describes extensions to RSVP-TE in support of the establishment
of Operation, Administration and Management entities in the context of GMPLS .

The document seems well written. I would suggest removing the last sentence of
the Security Considerations section ("Cryptography can be used...") since it
does not really offer any hint as to how to use cryptography. Instead, the
previous sentence could be replaced with something like: "For a more
comprehensive discussion of GMPLS security, and attack mitigation techniques,
please see the
   Security Framework for MPLS and GMPLS Networks [

RFC5920

]."



-- Magnus