Dynamic Routing Protocols using /30 networks for adjacencies

[nathanielscriven]

Something I just started to think about in terms of using encryption for adjacency hello traffic when /30s. Does not this not segregate this traffic onto its own network and make it unreachable from the network at large? And in that does it make the desire to encrypt this traffic less pressing?

I have encountered some networks where the adjacency is on a /24 which shares a broadcast domain which production traffic so encryption makes total sense in that scenario. I'm curious what you folks think. 

[Rob Cluett]

If you're targeting a secure environment it would be worthwhile to put encryption on your /30's.

[nathanielscriven]

That's not my question though. My question is what are the realistic threats of not having encryption on segregated point to point  /30 networks. (lan, not wan) How could someone realistically hijack an adjacency in this way. 

This is more of a thought experiment than anything else. 

[Rob Cluett]

deleted.

[Joseph W. Doherty · Accepted solution]

Much would depend on you physical plant security.

Hopefully, it's such, that someone cannot physically get into your p2p link.

In the case, like your example /24, likely that network has many access ports.

So, for the p2p vs. an "open" network, the latter would have more of a need for infrastructure encryption.

[nathanielscriven]

That's my thought as well. Thanks for entertaining the question!