[nsp] ip verify unicast reverse-path confirmation?

[lee.e.rian at census.gov]

> There's definately an increase in MSFC CPU load on our supervisor 2s when
we
> enable uRPF. Not a great deal, but some. Maybe surpressed verifications
have
> to be handled by the MSFC?
>
> Sam

We don't use uRPF so I don't know enough about it to say.  But if an RPF
failure generates a log message or ICMP unreachable that has to be done by
the MSFC.  Do you silently drop traffic that fails the RPF check or is
there some traffic that gets logged?  Do you have "no ip unreachables"
configured on all interfaces?  (ASSuming an RPF failure generates an ICMP
unreachable :-)

Lee