[c-nsp] ip verify unicast reverse-path

Kinczli Zoltán Zoltan.Kinczli at Synergon.hu
Thu Oct 13 05:31:34 EDT 2005


hello,

 afaik, there is no uRPF on the cat4k
 ip source-guard might be your friend if you use DHCP... which makes it to be an enterprise-class feature, not provider-class :(

http://www.cisco.com/en/US/products/hw/switches/ps4324/products_white_paper09186a00801faa79.shtml


-zoltan

-----Original Message-----
From: Peter Hicks [mailto:peter.hicks at poggs.co.uk]
Sent: Thursday, October 13, 2005 11:14 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] ip verify unicast reverse-path


All,

Cat4503 with a SupII+ in Paris, IOS 12.2(25)EW.  We have a 100Mb LAN
extension-type circuit on Gi2/38 with the port configured as follows:

   interface GigabitEthernet2/48
    no switchport
    ip address x.x.x.246 255.255.255.252
   end

I want to enable unicast RPF on the port (so that we don't end up with a
'working' situation of asymmetric routing), but it doesn't appear to be an
option.

Is it possible to use uRPF on the 4500 series with this IOS, or do I need a
different Sup or newer IOS?


Peter.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.14/131 - Release Date: 10/12/2005
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.14/131 - Release Date: 10/12/2005
 

Ez az üzenet és a hozzá kapcsolódó fájlok, tervezetek kizárólag a
Címzettnek szólnak, a bennük foglalt információk bizalmasak, melyek
titokban maradásához a Synergon Informatika Rt.-nek jogilag méltányolható
érdeke fuzodik. Amennyiben valamely hiba folytán Ön nem a címzettje ennek a
levélnek, kérjük, semmisítse meg, és értesítse az üzenet küldojét. Az
üzenet az elküldés elott vírusellenorzésen esett át, de a vírusmentességére
nincs semmilyen garancia, ezért kérjük, ellenorizze azt!

DISCLAIMER

This e-mail and any attached files are confidential and may be legally
privileged. The content of this e-mail is subject of efforts by Synergon to
maintain its confidentiality. Also this e-mail is intended for the sole use
of the individual or entity to whom it is addressed. If you are not the
addressee, and received this transmission in error please delete this
e-mail and notify its sender immediately. This e-mail message has been
checked for computer viruses but it could still be infected. Please test it
for viruses before use.





More information about the cisco-nsp mailing list