RE: [j-nsp] Dynamic source/dest address filtering

From: Stephen Gill (gillsr@yahoo.com)
Date: Thu Jul 18 2002 - 09:39:48 EDT


Yes, but can disable these with: no ip unreachables

-- steve

-----Original Message-----
From: Daniel Roesen [mailto:dr@cluenet.de]
Sent: Thursday, July 18, 2002 2:00 AM
To: Stephen Gill
Cc: 'Sher, Ryan'; juniper-nsp@puck.nether.net; juniper@groupstudy.com
Subject: Re: [j-nsp] Dynamic source/dest address filtering

On Wed, Jul 17, 2002 at 09:18:23PM -0500, Stephen Gill wrote:
> It is advisable to have discard routes in your routing table for bogon
> networks anyways, so presumably you could just point to one of these.
A
> static discard route is the same as using null0.

Uhm... Cisco Null0 device sends ICMP Unreachable by default. So the
equivalent would be a reject route, not a discard route.

Regards,
Daniel



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:36 EDT