[nsp] ip verify unicast reverse-path confirmation?
andrew lattis
cisco-nsp at naranek.org
Thu Nov 6 15:29:52 EST 2003
On 2003/11/06 02:27:04PM -0500, Thu, Streiner, Justin wrote:
> On Thu, 6 Nov 2003, Bob Snyder wrote:
>
> > Is there any command to see the effects of the "ip verify unicast
> > reverse-path" command? Packet drop counters, etc?
>
> You can do a "sho ip int <interface>" and it will show you the number of
> packets that were dropped due to RPF checks. I don't think there is an
> equivalent that's accessible via SNMP. I looked for one a few weeks ago
> and didn't find anything.
also with new code (not sure of exact versions, but 121-20 ip plus works) you
can match an acl
ip verify unicast reverse-path 99
access-list 99 deny any log
More information about the cisco-nsp
mailing list