Re: [nsp] ip verify unicast reverse-path

From: Gert Doering (gert@greenie.muc.de)
Date: Thu Jun 07 2001 - 03:16:57 EDT


Hi,

On Wed, Jun 06, 2001 at 09:37:03PM -0700, Danny Sutantyo wrote:
> So if I have mgmt segment on ISP routers, and the private address on the
> mgmt segment won't be able to ping the public interfaces?

No. This loop issue is only relevant if you ping *from the router*.

If you ping from the outside, if an interface is "up", it's reachable.

> Since I have network mgmt/monitoring, is it good to have this unicast
> implementation?

Yes. It's good in all cases except for multihomed customers with dynamic
routes (if you have multihomed customers and *all* their networks are
statically routed over *all* interfaces, then it is good as well).

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert@greenie.muc.de
fax: +49-89-35655025                        gert.doering@physik.tu-muenchen.de



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:40 EDT