[c-nsp] URPF MAC check

[Dobbins, Roland]

On Nov 23, 2012, at 7:12 PM, Roland Dobbins wrote:

> Would adding MAC address filtering to PACLs do the trick?  In other words, would static policies be sufficient?

Or would IP Source Guard configured for static addressing work?

<http://packetlife.net/blog/2009/may/25/ip-source-guard-without-dhcp/>

I don't know offhand if IP Source Guard static bindings are limited to /32s or not . . .

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton