[c-nsp] Loopback IP set to .255 - 6500 responds to ICMP echo-request from wrong interface

Jon Lewis jlewis at lewis.org
Sun Jan 1 12:12:57 EST 2012


On Sun, 1 Jan 2012, Mikael Abrahamsson wrote:

> On Sun, 1 Jan 2012, Mohamed Touré wrote:
>
>> For "security reasons" (Smurf attacks ...) IP packets with destination of 
>> classfull broadcast may be filtered by your upstream security devices if 
>> any.
>
> There were none of those involved in this.

Having seen IOS versions that refused to forward traffic for .255 
destinations, when the .255 was in the IGP as a /32 (even with ip 
classless in the config), I've since avoided using .0 or .255 addresses. 
It seems classful routing may be dead, but not entirely forgotten.

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


More information about the cisco-nsp mailing list