[c-nsp] security

Matlock, Kenneth L MatlockK at exempla.org
Mon Dec 1 15:53:36 EST 2008

An IP diected broadcast is an IP packet destined for the network or
broadcast address.

So for example let's say you have a subnet of is the network address. is the broadcast address.

An IP packet destined for (the destination address) would
by default get broadcasted out to all ports in the VLAN/LAN/etc that are
on the network. (something like the FF:FF:FF:FF:FF:FF
address on a Layer 2 segment).

Putting that command in disables that 'feature'.

Ken Matlock
Network Analyst
Exempla Healthcare
(303) 467-4671
matlockk at exempla.org
-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of chloe K
Sent: Monday, December 01, 2008 1:47 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] security

  I read doc about "no ip direct broadcast"
  but I still don't understand.
  Can you give me example?
  Thank you

Yahoo!         Canada Toolbar : Search from anywhere on         the web
and bookmark your favourite sites. Download it now!          
cisco-nsp mailing list  cisco-nsp at puck.nether.net
archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list