[c-nsp] Purposed of uRPF's "allow-default" Option?

Antonio Querubin tony at lava.net
Fri Jan 29 16:57:08 EST 2010


On Fri, 29 Jan 2010, Antonio Querubin wrote:

> Yes but that's not the interface where you would apply it.  You apply
                     ^
                necessarilly
> 'allow-default' on your upstream interface that you point your default route 
> to.  Ie. if you set your default-route at a particular interface or IP 
> address, then you add urpf 'allow-default' on the interface that leads to 
> your upstream gateway.

Ie. you normally do not use allow-default on most of your interfaces.  You 
use it only on upstream interfaces.

Antonio Querubin
808-545-5282 x3003
e-mail/xmpp:  tony at lava.net


More information about the cisco-nsp mailing list