RE: [nsp] ip verify unicast reverse-path

From: CLAEREBOUDT Elke (ECLAEREB@mail.mobistar.be)
Date: Thu Jun 07 2001 - 03:24:55 EDT


Hi,

As long as you use the right IOS (we did hit some bugs), and not the acl
option it should be working fine, but then you don't have any logging to see
which traffic is being dropped.
Have a look at
http://www.cisco.com/public/cons/isp/documents/IOSEssentialsPDF.zip
for how you need to implement it

elke
-----Original Message-----
From: Danny Sutantyo [mailto:dsutanty@dsutanty-wkst.sc.intel.com]
Sent: Wednesday 6 June 2001 21:09
To: cisco-nsp@puck.nether.net
Subject: [nsp] ip verify unicast reverse-path

Folks,
Has anybody used command called "ip verify unicast reverse-path" for
anti-spoofing in Cisco IOS Router features?

How do you implement this? and what's the side effect?

Thanks
Danny



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:40 EDT