Re: [nsp] 12.0(14)S/new uRPF code

From: Jared Mauch (jared@puck.nether.net)
Date: Sun Jan 07 2001 - 20:24:49 EST


On Sun, Jan 07, 2001 at 07:18:46PM -0600, Basil Kruglov wrote:
> On Sun, Jan 07, 2001 at 08:08:43PM -0500, Jared Mauch wrote:
> > > Could not find any notes at CCO... is this feature going to work in asymmetric
> > > environment?
> > >
> > > Also, is 12.0.14S+ the only version where this feature available at the
> > > moment?
> >
> > That i'm aware of.
> >
> > The 'ip verify source reachable via any' (or similar) is useful
> > to drop martians.
>
> but is it going to work in asymmetric environment,
> when two or more paths to the src are available, or is it going to drop
> packets the way 'ip verify unicast reverse-path' did? Thanks,

        Yes.

        That works in asym envir. It drops packets w/ srces that are
not in your forwarding table back to the src ip encaped
in the packet.

        - jared

-- 
Jared Mauch  | pgp key available via finger from jared@puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.
END OF LINE  | Manager of IP networks built within my own home



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:24 EDT