[nsp] "ip verify unicast reverse-path" broken, or is it just me?

Gert Doering gert at greenie.muc.de
Mon Dec 15 06:02:20 EST 2003


Hi,

On Mon, Dec 15, 2003 at 11:48:30AM +0100, Vincent De Keyzer wrote:
> Neither "sh ip int" nor "debug ip cef drops rpf" show anything... so it has
> to be an IOS bug?
> 
> Can one of you guys succesfully reproduce my test?

I know that uRPF works fine for us (various versions of 12.0S, 12.1 main,
12.2).  A test similar to yours (I use a PC client and send faked packets
via "nmap") yields the desired results.

What hardware and what IOS version are you using?

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the cisco-nsp mailing list