[c-nsp] reverse path filtering doesn't seem to work

Mike mike-cisconsplist at tiedyenetworks.com
Fri Nov 20 09:54:51 EST 2009


Steve Bertrand wrote:
>
> Hi Mike,
>
> It's not clear to me whether you are pinging from CPE->you or you->CPE.
>
>   

I said I was pinging from my router cli - the side that I want to 
implement urpf on.

> Is this serial link the only connection that the CPE has? Do you have
> uRPF enabled on your side, as well as the CPE?
>   
I only enable it on my router and never touch the CPE. When I turn it 
on, on my router, I can no longer ping the CPE from my router. When I 
disable urpf on my router, I can again ping it.

> ...and perhaps a silly question... does this work if you disable uRPF?
>   
As I said, yes it does work when urpf if off.




More information about the cisco-nsp mailing list