[nsp] ip verify unicast reverse-path confirmation?

andrew lattis cisco-nsp at naranek.org
Thu Nov 6 15:29:52 EST 2003


On 2003/11/06 02:27:04PM -0500, Thu, Streiner, Justin wrote:
> On Thu, 6 Nov 2003, Bob Snyder wrote:
> 
> > Is there any command to see the effects of the "ip verify unicast
> > reverse-path" command? Packet drop counters, etc?
> 
> You can do a "sho ip int <interface>" and it will show you the number of
> packets that were dropped due to RPF checks.  I don't think there is an
> equivalent that's accessible via SNMP.  I looked for one a few weeks ago
> and didn't find anything.

also with new code (not sure of exact versions, but 121-20 ip plus works) you 
can match an acl

ip verify unicast reverse-path 99
access-list 99 deny   any log


More information about the cisco-nsp mailing list