[c-nsp] URPF MAC check
Saku Ytti
saku at ytti.fi
Fri Nov 23 07:41:25 EST 2012
On (2012-11-23 13:16 +0100), Gert Doering wrote:
> You do?
>
> I don't. I see an outgoing best path to one of my peers. But I have no
> idea who is sending it *to* me - especially given multihomed customers of
> my peers, I might see the path via peer A, but the incoming packets come
> via peer B, fully legitimately so.
OP is talking situation where he uses strict/RPF, so yes, you do. This is
clearly not normal internet peering.
Question is valid, verifying SMAC is possible.
--
++ytti
More information about the cisco-nsp
mailing list