[c-nsp] ACL rejecting rather than dropping

Vincent De Keyzer vincent at autempspourmoi.be
Thu May 31 09:32:36 EDT 2007


> That's what 'normal IOS' does by default, unless you have 'no ip unreach'
> configured on the ingress interface :-)

Thanks Gert.

What are the downsides of running "ip unreachable"? It was always presented
to me as a bad thing...

Vincent




More information about the cisco-nsp mailing list