[nsp] ip verify unicast reverse-path confirmation?

lee.e.rian at census.gov lee.e.rian at census.gov
Thu Dec 4 21:17:59 EST 2003


> There's definately an increase in MSFC CPU load on our supervisor 2s when
we
> enable uRPF. Not a great deal, but some. Maybe surpressed verifications
have
> to be handled by the MSFC?
>
> Sam

We don't use uRPF so I don't know enough about it to say.  But if an RPF
failure generates a log message or ICMP unreachable that has to be done by
the MSFC.  Do you silently drop traffic that fails the RPF check or is
there some traffic that gets logged?  Do you have "no ip unreachables"
configured on all interfaces?  (ASSuming an RPF failure generates an ICMP
unreachable :-)

Lee




More information about the cisco-nsp mailing list