[cisco-nas] Spoofed IPs

Gert Doering gert at greenie.muc.de
Tue May 4 12:03:25 EDT 2004


Hi,

On Tue, May 04, 2004 at 09:59:50AM -0500, Mike Hyde wrote:
> Is there an easy way to block spoofed IPs on the nas, or just use an
> access-list on group-async?

enable "ip verify unicast reverse" on the virtual-template

(You should run fairly recent IOS versions and need to switch on CEF)

gert

-- 
Gert Doering
Mobile communications ... right now writing from * RIPE48 / Amsterdam *


More information about the cisco-nas mailing list