[c-nsp] Large networks

Mikael Abrahamsson swmike at swm.pp.se
Wed Aug 26 10:11:28 EDT 2009


On Wed, 26 Aug 2009, Gert Doering wrote:

> Hi,
>
> On Wed, Aug 26, 2009 at 03:52:55PM +0200, Mikael Abrahamsson wrote:
>> On Wed, 26 Aug 2009, Gert Doering wrote:
>>
>>> So how do you prevent customer A from sending out packets with an IP
>>> address belonging to customer B?  (For whatever reason).
>>
>> Antispoofing ACL on vlan interface?
>
> Won't help if you have customer A and customer B in the same VLAN.

They are not in the same vlan, they're in the same IP subnet but in 
different vlans.

-- 
Mikael Abrahamsson    email: swmike at swm.pp.se


More information about the cisco-nsp mailing list