[c-nsp] Large networks

[Ivan Pepelnjak]

RPF check? 

> -----Original Message-----
> From: Mikael Abrahamsson [mailto:swmike at swm.pp.se] 
> Sent: Wednesday, August 26, 2009 3:53 PM
> To: Gert Doering
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Large networks
> 
> On Wed, 26 Aug 2009, Gert Doering wrote:
> 
> > So how do you prevent customer A from sending out packets 
> with an IP 
> > address belonging to customer B?  (For whatever reason).
> 
> Antispoofing ACL on vlan interface? Or if you have an access 
> layer, you can do your L2.5 access lists there on ingress.
> 
> -- 
> Mikael Abrahamsson    email: swmike at swm.pp.se
> 
>