[nsp] Any plans for unicast RPF on Catalyst 4000/SupIII?

[Thomas Kernen]

You want to use port-security with IP Source guard and/or Dynamic Arp
Inspection. It's the equiv to uRPF but basically with better granularity
(IMHO).

I'm running it in a Metro E network and it's doing a fine job for us.

Thomas

----- Original Message ----- 
From: "Matti Saarinen" <mjs at cc.tut.fi>
To: <cisco-nsp at puck.nether.net>
Sent: Tuesday, November 11, 2003 8:44 AM
Subject: [nsp] Any plans for unicast RPF on Catalyst 4000/SupIII?


>
> Does anyone know will unicast RPF (ip verify unicast reverse-path) be
> supported on SupIII on Catalyst 4000? I checked the release notes and
> the feature isn't in 12.1(20)EW or in any earlier version. It may be
> it isn't documented and there are some hidden features but at least I
> haven't found them. The box supports PIM so it must be able to do
> unicast RPF verifications.
>
> Or if there are some reasons for which the uRPF can't be supported on
> SupIII I would like to know.
>
>
> Cheers,
>
> -- 
> - Matti -
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/