Source Accreditation Checks

The accreditation checks conducted on the source host are:

• The label of the data being sent must be within the destination host's accreditation range.

• The label of the data must be within the accreditation range of the emetric for the route or, if the emetric is not available, the first-hop gateway's security attributes.

• The label of the data must be within the accreditation range of the source host's network interface.

• The DOI of an outgoing packet must match the DOI of the destination and the route's emetric (or first-hop gateway).

• An outgoing packet's RIPSO label must match the RIPSO label of the destination and the route's emetric (or first-hop gateway). Alternatively, the RIPSO error can match the destination's RIPSO error, the route's emetric, or the first-hop gateway's RIPSO error.