[nsp] "ip verify unicast reverse-path" broken, or is it just me?

Mustafa N. Deeb mustafa at palnet.com
Mon Dec 15 05:46:09 EST 2003


hi

For testing, if you enable it on one interface, it won't be a problem,
unless there is a bug in the IOS
And this you can check from the cisco websiet

cheers

~~~~~~~~~~~~~~~~~~~~~~
Mustafa N. Deeb
Technical Director
Palnet Communications Ltd.
Tel: +970-2-2403434
Fax: +970-2-2403430
www.palsms.com
www.paltime.net
www.palnet.com



-----Original Message-----
From: Vincent De Keyzer [mailto:vincent at dekeyzer.net] 
Sent: Monday, December 15, 2003 11:39 AM
To: Mustafa at palnet.com; cisco-nsp at puck.nether.net
Subject: RE: [nsp] "ip verify unicast reverse-path" broken, or is it
just me?

... I was talking about the debug command (CEF is of course enabled,
otherwise the box does not accept the RPF command)

Isn't the debug going to crash my router? Maybe there is some other way
to
check, with a show command for instance?

Vincent


> You have to enable it in order for this to work
> 
> 
> 
> -----Original Message-----
> From: Vincent De Keyzer [mailto:vincent at dekeyzer.net] 
> Sent: Monday, December 15, 2003 11:28 AM
> To: Mustafa at palnet.com; cisco-nsp at puck.nether.net
> Subject: RE: [nsp] "ip verify unicast reverse-path" broken, 
> or is it just me?
> 
> > are you sure CEF is working right?
> > 
> > What did debug ip cef drops rpf said on your access ?
> 
> Is it a safe thing to enable on a production router?
> 
> V




More information about the cisco-nsp mailing list