[c-nsp] URPF MAC check

Saku Ytti saku at ytti.fi
Fri Nov 23 07:41:25 EST 2012


On (2012-11-23 13:16 +0100), Gert Doering wrote:

> You do?
> 
> I don't.  I see an outgoing best path to one of my peers.  But I have no
> idea who is sending it *to* me - especially given multihomed customers of
> my peers, I might see the path via peer A, but the incoming packets come
> via peer B, fully legitimately so.

OP is talking situation where he uses strict/RPF, so yes, you do. This is
clearly not normal internet peering.
Question is valid, verifying SMAC is possible.

-- 
  ++ytti


More information about the cisco-nsp mailing list